Test Kennung:	1.3.6.1.4.1.25623.1.0.112612
Kategorie:	Web application abuses
Titel:	WordPress Ultimate Member Plugin < 2.0.40 CSRF Vulnerability
Zusammenfassung:	The WordPress plugin Ultimate Member is prone to a cross-site request forgery (CSRF) vulnerability.
Beschreibung:	Summary: The WordPress plugin Ultimate Member is prone to a cross-site request forgery (CSRF) vulnerability. Vulnerability Insight: The vulnerability exists because the attacker can change the e-mail address in the administrator profile which makes him able to reset the administrator password using the WordPress 'password forget' form. Vulnerability Impact: Successful exploitation of this vulnerability would allow a remote attacker to become admin and subsequently extract sensitive information and execute arbitrary code. Affected Software/OS: WordPress Ultimate Member plugin before version 2.0.40. Solution: Update to version 2.0.40 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-10673
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.