Skip to content
OpenAdvisories

Vendor

jeremieglotin

1 known vulnerabilities.

Products

Webo-facto 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-8853

    Webo-facto <= 1.40 - Unauthenticated Privilege Escalation

    The Webo-facto plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.40 due to insufficient restriction on the 'doSsoAuthentification' function. This makes it possible for unauthenticated attackers to make themselves a…

    jeremieglotin Webo-facto Web / CMS