Skip to content
OpenAdvisories

Vendor

8blocks

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.3

    1003 Mortgage Application <= 1.87 - Unauthenticated Full Path Disclosure

    The 1003 Mortgage Application plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.87. This is due the /inc/class/fnm/export.php file being publicly accessible with error logging enabled. This makes it possible fo…

  • Medium 4.3

    WordPress 1003 Mortgage Application plugin <= 1.87 - Broken Access Control vulnerability

    Missing Authorization vulnerability in 8blocks 1003 Mortgage Application 1003-mortgage-application allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 1003 Mortgage Application: from n/a through <= 1.87.