PT-2018-8947
CVE-2018-0589
·
Publicado
2018-05-14
·
Atualizado
2019-11-20
Descrição por
CVSS 3.1
4.3
MédiaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Ultimate Member plugin versions prior to 2.0.4
Description
The issue allows remote authenticated attackers to bypass access restrictions, enabling them to add a new form in the 'Forms' page.
Recommendations
For versions prior to 2.0.4, update to version 2.0.4 or later to resolve the issue.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾