CVE-2023-3139

Protect WP Admin < 4.0 - Unauthenticated Protection Bypass

EPSS 0.7%

Vexday Risk Score

18Bajo

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

CVSS —EPSS 0.7%KEV nãoPoC —Nuclei simMetasploit —Patch —

Ciclo de vida

04 jul 2023Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin panel via a redirection of a crafted URL, bypassing the protection offered.

Productos afectados

Unknown · Protect WP Admin

Referencias

https://magos-securitas.com/txt/CVE-2023-3139.txt https://wpscan.com/vulnerability/f8a29aee-19cd-4e62-b829-afc9107f69bd