CVE-2024-8853
EUVD-2024-4943620.09.2024, 08:15
The Webo-facto plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.40 due to insufficient restriction on the 'doSsoAuthentification' function. This makes it possible for unauthenticated attackers to make themselves administrators by registering with a username that contains '-wfuser'.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| medialibs | webo-facto | 𝑥 < 1.41 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| medialibs | webo-facto | 𝑥 ≤ 1.40 | ADP |
Common Weakness Enumeration