PT-2024-14475 · WordPress · Wpforms User Registration

Rafie Muhammad · Published 2024-08-01 · Updated 2024-08-02 · CVE-2023-52209

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WPForms User Registration versions n/a through 2.1.0

Description The issue is related to Improper Privilege Management, allowing Privilege Escalation in WPForms User Registration.

Recommendations For versions n/a through 2.1.0, update to a version later than 2.1.0 to resolve the issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2023-52209

Affected Products

Wpforms User Registration

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-52209 · Security Note
• https://t.me/cvedetector/2285 · Telegram Post
• https://t.me/cvenotify/88350 · Telegram Post
• https://t.me/cvenotify/88537 · Telegram Post
• https://patchstack.com/database/vulnerability/wpforms-user-registration/wordpress-wpforms-user-registration-plugin-2-1-0-authenticated-privilege-escalation-vulnerability?_s_id=cve · Note