CVE-2024-13182
WP Directorybox Manager <= 2.5 - Authentication Bypass
Vexday Risk Score
28Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 9.8EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
13 feb 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
The WP Directorybox Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.5. This is due to incorrect authentication in the 'wp_dp_parse_request' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Chimpstudio · WP Directorybox Manager¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →