CVE-2014-1889
medium · 6.5The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gain control of arbitrary groups by leveraging a missing permissions check.
6.5
CVSS
10.4%
EPSS (exploit prob.)
96th
EPSS percentile
2018-04-10
Published
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-264
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| buddypress | buddypress | < 1.9.2 |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/archive/1/531050/100/0/threaded
- http://www.securityfocus.com/bid/65554
- https://buddypress.org/2014/02/buddypress-1-9-2/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91261
- http://www.securityfocus.com/archive/1/531050/100/0/threaded
- http://www.securityfocus.com/bid/65554
- https://buddypress.org/2014/02/buddypress-1-9-2/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91261
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2014-1889