exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Istvan Marton

WordPress UserPro 5.1.x Password Reset / Authentication Bypass / Escalation

Posted Nov 22, 2023

Authored by Istvan Marton | Site wordfence.com

WordPress UserPro plugin versions 5.1.1 and below suffer from an insecure password reset mechanism, information disclosure, and authentication bypass vulnerabilities. Versions 5.1.4 and below suffer from privilege escalation and shortcode execution vulnerabilities.

tags | exploit, vulnerability, code execution, bypass, info disclosure

advisories | CVE-2023-2437, CVE-2023-2446, CVE-2023-2448, CVE-2023-2449, CVE-2023-6009

SHA-256 | bfb7306b803b1acac19078db2972f3aa4724b44e3c44892d41946574771b0eda

Download | Favorite | View

WordPress Ultimate Member 2.6.6 Privilege Escalation

Posted Jun 30, 2023

Authored by Marc-Alexandre Montpas, Ramuel Gall, Istvan Marton

WordPress Ultimate Member plugin versions 2.6.6 and below suffer from a privilege escalation vulnerability.

tags | advisory

advisories | CVE-2023-3460

SHA-256 | f5d75217bac851597070df579c5cffbcbc42ab75dddb1476c2fdcaa31a651b75

Download | Favorite | View