Podatność CVE-2023-4800
Publikacja: 2023-10-16

Opis:
The DoLogin Security WordPress plugin before 3.7.1 does not restrict the access of a widget that shows the IPs of failed logins to low privileged users.

Typ:

CWE-425

 (Direct Request ('Forced Browsing'))

 Referencje:
https://wpscan.com/vulnerability/7eae1434-8c7a-4291-912d-a4a07b73ee56
Copyright 2024, cxsecurity.com

 

Back to Top