Vulnerability Bulletins |
Authentication Bypass Vulnerability in GiveWP Plugin |
|
| Affected software | Wordpress |
|
https://www.wordfence.com/blog/2019/09/authentication-bypass-vulnerability-in-givewp-plugin/ Description: Authentication Bypass with Information DisclosureCVSS v3.0 Score: 7.5 (High)CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NAffected Plugin: GiveWPPlugin Slug: giveAffected Versions: <= 2.5.4Patched Version: 2.5.5 A few weeks ago, our Threat Intelligence team discovered a vulnerability present in GiveWP, a WordPress plugin installed on over 70,000 websites. The weakness More info: https://www.wordfence.com/blog/2019/09/authentication-bypass-vulnerability-in-givewp-plugin/ |
|