CVE-2023-6384 in WP User Profile Avatar Plugin

الملخص

بحسب MITRE • 22/01/2024

The WP User Profile Avatar WordPress plugin before 1.0.1 does not properly check for authorisation, allowing authors to delete and update arbitrary avatar

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• حجز: 29/11/2023
• إفشاء: 22/01/2024
• الاعتدال: تمت الموافقة
• إدخال: VDB-251733
• CPE: جاهز
• CWE: CWE-639 (مؤكد)
• CVSS: 4.3 (NVD)
• EPSS: 0.00405
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Hostingprovider

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-6384
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-6384
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-6384/