CVE-2024-10311
EUVD-2024-3303115.11.2024, 10:15
The External Database Based Actions plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 0.1. This is due to a missing capability check in the 'edba_admin_handle' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to update the plugin settings and log in as any existing user on the site, such as an administrator.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| cmorillas1 | external_database_based_actions | 0.1 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| wordpress | external_database_based_actions | 𝑥 ≤ 0.1 | ADP |
Common Weakness Enumeration