Lucene search

K
wpvulndbWpvulndbWPVDB-ID:4309C505-FC44-4925-AAA8-7F0EAF73F158
HistoryMay 03, 2024 - 12:00 a.m.

WP Masquerade <= 1.1.0 - Subscriber+ Account Takeover

2024-05-0300:00:00
wpscan.com
3
wordpress
plugin
vulnerability
privilege escalation
authenticated attackers

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

Description The WP Masquerade plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.1.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to access other users accounts which may be higher in privilege.

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

Related for WPVDB-ID:4309C505-FC44-4925-AAA8-7F0EAF73F158