Vulnerabilities and Security Researches

InfiniteWP Client, CVE-2020-8772

CVE, Research URL: CVE-2020-8772
Home page URL: Security reports for InfiniteWP Client
Application: InfiniteWP Client
Published on: Feb 06, 2020
Research Description: The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php. Any attacker who knows the username of an administrator can log in.
Affected versions: Min -, max 1.3.15.
Status: vulnerable