CVE-2022-4693 in User Verification Plugininformation

Résumé

par MITRE • 23/01/2023

The User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability. To bypass authentication, we only need to know the user’s username. Depending on whose username we know, which can be easily queried because it is usually public data, we may even be given an administrative role on the website.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Réserver

23/12/2022

Divulgation

23/01/2023

Modérer

accepté

Entrée

VDB-219157

CPE

prêt

EPSS

0.01598

KEV

non

Activités

très faible

Sources

Do you want to use VulDB in your project?

Use the official API to access entries easily!