Auth. (subscriber+) Insecure Direct Object References (IDOR) vulnerability in Comments – wpDiscuz plugin 7.4.2 on WordPress.
References
Link | Resource |
---|---|
https://patchstack.com/database/vulnerability/wpdiscuz/wordpress-comments-wpdiscuz-plugin-7-4-2-insecure-direct-object-references-idor-vulnerability?_s_id=cve | Third Party Advisory |
https://wordpress.org/plugins/wpdiscuz/#developers | Product Third Party Advisory |
Configurations
History
22 Nov 2022, 20:48
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-11-18 23:15
Updated : 2024-02-04 23:14
NVD link : CVE-2022-43492
Mitre link : CVE-2022-43492
CVE.ORG link : CVE-2022-43492
JSON object : View
Products Affected
gvectors
- wpdiscuz
CWE
CWE-639
Authorization Bypass Through User-Controlled Key