WP Frontend Profile < 1.3.2 - Unauthenticated Privilege Escalation

2024-01-0500:00:00

wpscan.com

vulnerability

privilege escalation

unauthenticated

wordpress

plugin

9.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

Description The plugin is vulnerable to privilege, allowing unauthenticated attackers to take over arbitrary accounts on the site.

CPENameOperatorVersion
eq1.3.2

CPE	Name	Operator	Version
		eq	1.3.2

References

patchstack.com/database/vulnerability/wp-front-end-profile/wordpress-wp-frontend-profile-plugin-1-3-1-unauthenticated-privilege-escalation-vulnerability