GHSA-mwxh-6j9v-45phCriticalCVSS 9.8
bbPress unauthenticated privilege-escalation
🔗 CVE IDs covered (1)
📋 Description
An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled.
🎯 Affected products1
- composer/bbpress/bbpress:< 2.6.5
🔗 References (6)
- https://nvd.nist.gov/vuln/detail/CVE-2020-13693
- https://wordpress.org/plugins/bbpress/#developers
- http://packetstormsecurity.com/files/157885/WordPress-BBPress-2.5-Privilege-Escalation.html
- https://bbpress.org/blog/2020/05/bbpress-2-6-5-is-out
- https://codex.bbpress.org/releases
- https://github.com/advisories/GHSA-mwxh-6j9v-45ph