Skip to content
OpenAdvisories

Vendor

idokd

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.8

    Simple Payment 1.3.6 - 2.3.8 - Authentication Bypass to Admin

    The Simple Payment plugin for WordPress is vulnerable to Authentication Bypass in versions 1.3.6 to 2.3.8. This is due to the plugin not properly verifying a user's identity prior to logging them in through the create_user() function. This makes it possible f…