← back
CVE-2017-14766

CVE-2017-14766

EPSS 1.8%
The Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass vulnerability because the fn_ssr_add_st_submit() function and fn_ssr_del_st_submit() function in functions.php only require knowing the student id number.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://limbenjamin.com/articles/simple-student-result-auth-bypass.htmlhttps://wordpress.org/plugins/simple-student-result/#developershttps://wpvulndb.com/vulnerabilities/8920