Improper authentication in Automattic Woocommerce Payments
CVSS Skor
9.8
EPSS İhtimal
%86.5
Risk Skoru
8.5
Yayın
3 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
Python research notes and tooling for CVE-2023-28121
Exploração prática de vulnerabilidade crítica no WordPress usando o plugin WooCommerce Payments.
WooCommerce Payments (WordPress plugin) =< 5.6.1 CVE-2023-28121 PoC
CVE-2023-28121 - WooCommerce Payments < 5.6.2 - Unauthenticated Privilege Escalation [ Mass Add Admin User ]
CVE-2023-28121 - WooCommerce Payments < 5.6.2 - Unauthenticated Privilege Escalation [ Mass Add Admin User ]
WooCommerce Payments: Unauthorized Admin Access Exploit
Nuclei: WooCommerce Payments - Unauthorized Admin Access
İlgili Benzer Açıklar
Vulnerability in Automattic Woocommerce
Vulnerability in Automattic Activitypub
Mongoose: Prototype pollution in the update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)
WordPress core <= 7.1 - Unauth. Cross Site Scripting (XSS) vulnerability
WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability
WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manager+ Privilege Escalation vulnerability
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-28121"