Security Advisory

CVE-2020-8772

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-02-06 16:27:31

Last updated 2024-08-04 10:12:10

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php. Any attacker who knows the username of an administrator can log in.

← Browse all CVEs View on cve.org ↗