Lucene search
PatchstackCVELIST:CVE-2023-52209HistoryAug 01, 2024 - 9:04 p.m.
CVE-2023-52209 WordPress WPForms User Registration plugin <= 2.1.0 - Authenticated Privilege Escalation vulnerability
2024-08-0121:04:10
CWE-269
Patchstack
www.cve.org
2
cve-2023
wpforms
user registration
privilege escalation
CVSS3
8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.4%
Improper Privilege Management vulnerability in WPForms, LLC. WPForms User Registration allows Privilege Escalation.This issue affects WPForms User Registration: from n/a through 2.1.0.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "WPForms User Registration",
"vendor": "WPForms, LLC.",
"versions": [
{
"changes": [
{
"at": "2.1.2",
"status": "unaffected"
}
],
"lessThanOrEqual": "2.1.0",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2023-52209
2024-08-01 21:15:26
nvd
nvd
CVE-2023-52209
2024-08-01 21:15:26
vulnrichment
vulnrichment
wordfence
wordfence
CVSS3
8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.4%
Related for CVELIST:CVE-2023-52209