← Back to CVE List

CVE-2020-8772

Published: 2020-02-06T17:15Z
Last Modified: 2024-11-21T05:39Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php. Any attacker who knows the username of an administrator can log in. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt