Miembros de
Boletines de Vulnerabilidades |
CVE-2025-7710 |
|
| Software afectado | WORDPRESS |
| The Brave Conversion Engine (PRO) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 0.7.7. This is due to the plugin not properly restricting a claimed identity while authenticating with Facebook. This makes it possible for unauthenticated attackers to log in as other users, including administrators. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-7710 | |
