mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2026-10-24 16:54:30 +00:00
21 lines
722 B
JSON
21 lines
722 B
JSON
{
|
|
"id": "CVE-2025-11855",
|
|
"sourceIdentifier": "[email protected]",
|
|
"published": "2025-11-11T06:15:35.000",
|
|
"lastModified": "2025-11-12T16:19:34.210",
|
|
"vulnStatus": "Awaiting Analysis",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "The age-restriction WordPress plugin through 3.0.2 does not have authorisation in the age_restrictionRemoteSupportRequest function, allowing any authenticated users, such as subscriber to create an admin user with a hardcoded username and arbitrary password."
|
|
}
|
|
],
|
|
"metrics": {},
|
|
"references": [
|
|
{
|
|
"url": "https://wpscan.com/vulnerability/1a16440e-817f-4ec2-9c70-261f6b63fb8a/",
|
|
"source": "[email protected]"
|
|
}
|
|
]
|
|
} |