tagDiv Composer < 3.5 - Unauthenticated Account Takeover
65Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actcvss 9.8epss 3.5%
da publicação à arma
Publicada no NVD14 de nov.
VulnCheck24 de out.
probabilidade de exploração
3.5%top 12% das CVEs
exploração observada
simVulnCheck
The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag WordPress theme before 5.2.2, does not properly implement the Facebook login feature, allowing unauthenticated attackers to login as any user by just knowing their email address
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H