Whmcs Client Area

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-9195 Feb 28, 09:15 HIGH This Week

The WHMPress - WHMCS Client Area plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the update_settings. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress Authentication Bypass Privilege Escalation Whmcs Client Area

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2024-9195

EPSS 0% CVSS 8.8

HIGH This Week

The WHMPress - WHMCS Client Area plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the update_settings. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress Authentication Bypass +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy