CVE-2022-40205: gVectors Team wpForo Forum (WordPress plugin)

Описание

Оригинално описание

Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as solved/unsolved.

Засегнати продукти

• gVectors Team wpForo Forum (WordPress plugin): <= 2.0.5 до 2.0.5

Вид слабост

• CWE-639 Authorization Bypass Through User-Controlled Key

История

Други уязвимости в gVectors Team wpForo Forum (WordPress plugin)

• 7.1CVE-2022-40192
• 9.9CVE-2022-40200
• 6.3CVE-2022-40206
• 5.4CVE-2022-40632
• 8.8CVE-2022-38144

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-40205
• https://nvd.nist.gov/vuln/detail/CVE-2022-40205
• https://wordpress.org/plugins/wpforo/
• https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-5-insecure-direct-object-references-idor-vulnerability-2?_s_id=cve