critical9.8Public exploit code
CVE-2020-13693
An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin BBPress 2.5 - Unauthenticated Privilege Escalation2020-06-01 · webapps · php
Impact
An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bbpress | Bbpress | before 2.6.5 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/157885/WordPress-BBPress-2.5-Privilege-Escalation.html
- https://bbpress.org/blog/2020/05/bbpress-2-6-5-is-out/
- https://codex.bbpress.org/releases/
- https://wordpress.org/plugins/bbpress/#developers
- http://packetstormsecurity.com/files/157885/WordPress-BBPress-2.5-Privilege-Escalation.html
- https://bbpress.org/blog/2020/05/bbpress-2-6-5-is-out/
- https://codex.bbpress.org/releases/
- https://wordpress.org/plugins/bbpress/#developers