Description (CNA)
The WPGateway Plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 3.5. This allows unauthenticated attackers to create arbitrary malicious administrator accounts.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Jack Hopman / WPGateway | affected * through 3.5 |
CWE
CWE-290
References
- https://www.wordfence.com/blog/2022/09/psa-zero-day-vulnerability-in-wpgateway-actively-exploited-in-the-wild/
- https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wpgateway/wpgateway-35-unauthenticated-privilege-escalation
ADP enrichment
No English description supplied.
No references supplied.