Invite-anyone Plugin Vulnerabilidad

Versión

1.3.03
1.3.13
1.3.23
1.3.33
1.3.43

Contramedidas

Official Fix3
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

Explotabilidad

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined3

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent0
Network3

Autenticación

Not Defined0
High0
Low0
None3

La interacción del usuario

Not Defined0
Required1
None2

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤81
≤91
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤81
≤91
≤100

VulDB

≤10
≤20
≤30
≤40
≤51
≤60
≤70
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤81
≤91
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k3
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k3
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

🔴 CTI Ocupaciones

Affected Versions (15): 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5, 1.3.6, 1.3.7, 1.3.8, 1.3.9, 1.3.11, 1.3.12, 1.3.13, 1.3.14, 1.3.15

Tipo de software: WordPress Plugin

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2019-08-167.57.3invite-anyone Plugin Dashboard escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2017-18545
2019-08-166.56.4invite-anyone Plugin Admin Panel cross site request forgery$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2017-18544
2019-08-168.58.4invite-anyone Plugin Access Control Email escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2017-18543

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!