Description
Broken Authentication vulnerability in JumpDEMAND Inc. ActiveDEMAND plugin <= 0.2.27 at WordPress allows unauthenticated post update/create/delete.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JumpDEMAND | ActiveDEMAND | ≤ 0.2.27 | — |
Medium · 6.5
CVE-2022-36296
EUVD-2022-39013GHSA-mp4f-pwv2-xxc8
WordPress ActiveDEMAND plugin <= 0.2.27 - Broken Authentication vulnerability
Published Aug 5, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack