CVE-2022-4693 in User Verification PluginИнформация

Сводка

по MITRE • 23.01.2023

The User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability. To bypass authentication, we only need to know the user’s username. Depending on whose username we know, which can be easily queried because it is usually public data, we may even be given an administrative role on the website.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Резервировать

23.12.2022

Раскрытие

23.01.2023

Модерация

принято

Вход

VDB-219157

EPSS

0.01598

KEV

Нет

Деятельности

Очень низкий

Сектор

Hostingprovider

Источники

Interested in the pricing of exploits?

See the underground prices here!