PT-2024-13485 · Unknown · Wp Maintenance

Mika · Published 2024-06-04 · Updated 2024-06-04 · CVE-2023-47769

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions WP Maintenance versions through 6.1.3

Description The issue is related to an Authentication Bypass by Spoofing vulnerability, which allows accessing functionality not properly constrained by ACLs.

Recommendations For versions through 6.1.3, update to a version later than 6.1.3 to resolve the issue.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2023-47769

Affected Products

Wp Maintenance

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-47769 · Security Note
• https://patchstack.com/database/vulnerability/wp-maintenance/wordpress-wp-maintenance-plugin-6-1-3-ip-filtering-bypass-vulnerability?_s_id=cve · Note
• https://t.me/cvenotify/81883 · Telegram Post
• https://twitter.com/CVEnew/status/1797939677137088783 · Twitter Post