CVE-2023-7247

Katalog CVE

CVSS 4.9 · Medium EPSS 0,64%

Kerentanan pada wp-buy login as user or customer (user switching). Skor CVSS 3.1 4.9 (Medium) menurut CISA ADP.

Deskripsi (NVD)

The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log in as any other user on the site.

Rincian

Terbit di NVD

11 Maret 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.9 (Medium), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

EPSS (30 hari)

0,64% peluang dieksploitasi; lebih tinggi dari 49,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/96b93253-31d0-4184-94b7-f1e18355d841/ exploit · advisory pihak ketiga
• https://drive.google.com/file/d/1GCOzJ-ZovYij9GIdmsrZrR9g8mlC22hs/view?usp=sharing exploit