WPGateway <= 3.5 - Unauthenticated Privilege Escalation
50Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Actcvss 9.8epss 9.2%
from disclosure to weapon
Published on NVDFeb 11
VulnCheckSep 13
exploitation probability
9.2%top 5% of all CVEs
observed exploitation
yesVulnCheck
The WPGateway Plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 3.5. This allows unauthenticated attackers to create arbitrary malicious administrator accounts.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Jack Hopman · WPGateway