Flo Launch < 2.4.1 - Missing Authentication Allow Full Site Takeover
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | CVE-2022-0541 | 25 Apr 202216:16 | – | attackerkb |
 | WordPress和WordPress plugin 安全漏洞 | 25 Apr 202200:00 | – | cnnvd |
 | WordPress plugin flo-launch access control error vulnerability | 27 Apr 202200:00 | – | cnvd |
 | CVE-2022-0541 | 25 Apr 202215:50 | – | cve |
 | CVE-2022-0541 Flo Launch < 2.4.1 - Missing Authentication Allow Full Site Takeover | 25 Apr 202215:50 | – | cvelist |
 | EUVD-2022-15663 | 3 Oct 202520:07 | – | euvd |
 | CVE-2022-0541 | 25 Apr 202216:16 | – | nvd |
 | CVE-2022-0541 | 25 Apr 202216:16 | – | osv |
 | WordPress Flo Launch plugin <= 2.4 - Missing Authentication Allows Full Site Takeover vulnerability | 29 Mar 202200:00 | – | patchstack |
 | Code injection | 25 Apr 202216:16 | – | prion |
10
On any website where flo-launch is active create cookie "flo_custom_table_prefix" with any string value to initiate new WordPress instance setup.
Complete setup and login as admin.Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
11 Apr 2022 07:51Current
1.6Low risk
Vulners AI Score1.6
CVSS 27.5
CVSS 3.19.8
EPSS0.01703