Vendor
8blocks
3 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Medium 5.3
1003 Mortgage Application <= 1.87 - Unauthenticated Full Path Disclosure
The 1003 Mortgage Application plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.87. This is due the /inc/class/fnm/export.php file being publicly accessible with error logging enabled. This makes it possible fo…
-
Medium 4.3
WordPress 1003 Mortgage Application plugin <= 1.87 - Broken Access Control vulnerability
Missing Authorization vulnerability in 8blocks 1003 Mortgage Application 1003-mortgage-application allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 1003 Mortgage Application: from n/a through <= 1.87.