Lucene search

K
wpvulndbWpvulndbWPVDB-ID:0A381F83-056F-4F32-A1AD-0B128F5C8818
HistoryJul 20, 2021 - 12:00 a.m.

NEX Forms < 7.8.8 - Authentication Bypass for PDF Reports

2021-07-2000:00:00
wpscan.com
3

The plugin was vulnerable to Authentication Bypass for PDF Reports allowing unauthenticated attackers to download PDF reports.

PoC

http://www.example.com/wp-content/uploads/submission_report.pdf

CPENameOperatorVersion
nex-formslt7.8.8
Related for WPVDB-ID:0A381F83-056F-4F32-A1AD-0B128F5C8818