Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.8
CVSSv3

CVE-2017-16562

Published: 10/11/2017 Updated: 03/10/2019
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Userproplugin

Vulnerability Summary

The UserPro plugin prior to 4.9.17.1 for WordPress, when used on a site with the "admin" username, allows remote malicious users to bypass authentication and obtain administrative access via a "true" value for the up_auto_log parameter in the QUERY_STRING to the default URI.

Vulnerable Product Search on Vulmon Subscribe to Product

userproplugin userpro

Exploits

Exploit DB: WordPress Plugin Userpro < 4.9.17.1 - Authentication Bypass
# Exploit Title: Userpro – WordPress Plugin – Authentication Bypass # Google Dork: inurl:/plugins/userpro # Date: 11042017 # Exploit Author: Colette Chamberland (Wordfence), Iain Hadgraft (Duke University) # Vendor Homepage: codecanyonnet/item/userpro-user-profiles-with-social-login/5958681?s_rank=9 # Software Link: codecanyo ...

References

CWE-287https://www.exploit-db.com/exploits/43117/https://codecanyon.net/item/userpro-user-profiles-with-social-login/5958681?s_rank=9https://wpvulndb.com/vulnerabilities/8950https://nvd.nist.govhttps://www.exploit-db.com/exploits/43117/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-29895injectCVE-2023-52689CVE-2024-5049CVE-2024-5051privilege escalationphysicalCVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook