Lucene search
WpvulndbWPVDB-ID:8458A81D-446B-474F-9E78-426ED120ADCBHistoryNov 07, 2022 - 12:00 a.m.
LoginPress < 1.6.3 - Unauthenticated Settings Update
2022-11-0700:00:00
wpscan.com
9
loginpress
plugin
unauthenticated
settings
update
vulnerability
0.001 Low
EPSS
Percentile
31.5%
The plugin does not have authorisation and CSRF checks when updating its Opt-In and Opt-Out tracking settings, which could allow any unauthenticated users to update them
| CPE | Name | Operator | Version |
|---|---|---|---|
| loginpress | lt | 1.6.3 |
Related
cvelist
cvelist
patchstack
patchstack
WordPress LoginPress plugin <= 1.6.2 - Broken Access Control vulnerability
2022-11-07 00:00:00
cve
cve
CVE-2022-41839
2022-11-18 23:15:26
nvd
nvd
CVE-2022-41839
2022-11-18 23:15:26
openvas
openvas
WordPress LoginPress Plugin < 1.6.3 Access Control Vulnerability
2022-11-21 00:00:00
prion
prion
Improper access control
2022-11-18 23:15:00