PT-2023-20268 · WordPress · Gamipress

·

CVE-2023-25715

·

Publicado

2023-12-19

·

Atualizado

2023-12-28

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions GamiPress versions through 2.5.6
Description The issue is related to a Missing Authorization vulnerability in the GamiPress plugin for WordPress, which is used for gamification purposes such as rewarding points, achievements, badges, and ranks.
Recommendations For versions through 2.5.6, update to a version newer than 2.5.6 to resolve the issue.

Correção

Missing Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-25715

Produtos afetados

Gamipress