Lucene search
WpvulndbWPVDB-ID:08F34BD8-ADFF-4910-859B-5B813F47C594HistoryMar 11, 2023 - 12:00 a.m.
FluentCRM - Marketing Automation For WordPress < 2.8.0 - Unauthenticated Subscriptions Update
2023-03-1100:00:00
wpscan.com
5
fluentcrm
marketing automation
wordpress
unauthenticated
subscriptions
md5 hash
attackers
manage subscriptions
0.001 Low
EPSS
Percentile
33.2%
The plugin does not properly secure the use of MD5 hash without a salt to control subscriptions, making it possible for unauthenticated attackers to unsubscribe users from lists and manage subscriptions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fluent-crm | lt | 2.8.0 |
Related
prion
prion
Code injection
2023-06-09 06:15:00
nvd
nvd
CVE-2023-1430
2023-06-09 06:15:57
cve
cve
CVE-2023-1430
2023-06-09 06:15:57
githubexploit
githubexploit
Exploit for CVE-2023-1430
2023-06-12 10:07:01
cvelist
cvelist
CVE-2023-1430
2023-06-09 05:33:37