packetstormsecurity.com
http://packetstormsecurity.com/files/157885/WordPress-BBPress-2.5-Privilege-Escalation.html CVE-2020-13693
CRITICAL
bbPress unauthenticated privilege-escalation
Record summary
CVE-2020-13693 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
bbpress/bbpressBrowse Packagist / bbpress/bbpress | GitHub Advisory | Before 2.6.5 · Fixed in 2.6.5 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBWordPress Plugin BBPress 2.5 - Unauthenticated Privilege EscalationExploitDB exploitby Raphael KargerNot analyzed1 file
References
6bbpress.org
https://bbpress.org/blog/2020/05/bbpress-2-6-5-is-out codex.bbpress.org
https://codex.bbpress.org/releases github.com
https://github.com/bbpress/bbPress nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-13693 wordpress.org
https://wordpress.org/plugins/bbpress