2.7

CVE-2024-10098

Exploit

ApplyOnline – Application Form Builder and Manager < 2.6.3 - Unauthenticated Application File Access

ApplyOnline <= 2.6.2 - Unauthenticated Application Disclosure

The ApplyOnline  WordPress plugin before 2.6.3 does not protect uploaded files during the application process, allowing unauthenticated users to access them and any private information they contain
Mögliche Gegenmaßnahme
ApplyOnline – Application Form Builder and Manager: Update to version 2.6.3, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Spiderteams ≫ Applyonline - Application Form Builder And Manager SwPlatformwordpress Version < 2.6.3
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt ApplyOnline – Application Form Builder and Manager
Version *-2.6.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.34% 0.259
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 2.7 1.2 1.4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://wpscan.com/vulnerability/242dac1f-9a1f-4fde-b8c7-374bd451071d/
Third Party Advisory
Exploit
https://www.wordfence.com/threat-intel/vulnerabilities/id/e83f9945-b49f-4718-9ff2-673a7f66c381
Third Party Advisory