Lucene search
WpvulndbWPVDB-ID:C30B2378-59D4-4C2E-8C65-EA9772BA96CBHistoryJun 29, 2023 - 12:00 a.m.
SP Project & Document Manager < 4.68 - Subscriber+ Insecure Direct Object References
2023-06-2900:00:00
wpscan.com
8
sp project & document manager
unauthorized access
password changes
EPSS
0.001
Percentile
39.7%
The plugin allows direct access to objects, allowing an authenticated user with subscriber privileges or above, to bypass authorization and change user passwords and potentially take over administrator accounts.
Related
cve
cve
CVE-2023-3063
2023-06-30 02:15:09
nvd
nvd
CVE-2023-3063
2023-06-30 02:15:09
cvelist
cvelist
CVE-2023-3063
2023-06-30 01:56:17
prion
prion
Authorization
2023-06-30 02:15:00
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (June 26, 2023 to July 2, 2023)
2023-07-06 12:58:56
2023’s Critical WordPress Vulnerabilities and How They Work
2024-02-12 19:11:21