PT-2020-20456 · WordPress · Wpcentral

Published 2020-02-17 · Updated 2021-07-21 · CVE-2020-9043

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions wpCentral plugin versions prior to 1.5.1

Description The issue allows any user to elevate their privileges to the administrator level and remotely manage the site through the wpCentral administrative panel. It is estimated that over 60,000 sites are affected. The developer has released a fixed version.

Recommendations For versions prior to 1.5.1, update to version 1.5.1 or later to resolve the issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2020-9043

Affected Products

Wpcentral

References · 6

• 🔥 https://wpvulndb.com/vulnerabilities/10074 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-9043 · Security Note
• https://plugins.trac.wordpress.org/changeset?&old=2244363%40wp-central&new=2244363%40wp-central · Patch
• https://osv.dev/vulnerability/CVE-2020-9043 · Vendor Advisory
• https://wordpress.org/plugins/wp-central/#developers · Note
• https://t.me/true_secator/180 · Telegram Post