| ID | 52145 |
| Created | Sep 15, 2022 |
| Updated | Sep 20, 2022 |
| Outbreak Alert | WPGateway Plugin Vulnerability |
| Severity |
|
| Coverage |
IPS (Regular DB)
IPS (Extended DB)
|
| Default Action | drop |
| Active |
|
| Affected OS | Linux |
| Affected App | PHP_app |
Legend
| Active/Available |
|
| InActive/Not Available |
|
Update History
| Date | Version | Detail |
|---|---|---|
| 2022-09-21 | 22.398 | Default_action:pass:drop |
| 2022-09-15 | 22.395 |
Refine Search
Threat Encyclopedia
WordPress.WPGateway.Plugin.Authentication.Bypass
Description
This indicates an attack attempt to exploit an Authentication Bypass vulnerability in WordPress WPGateway Plugin.
The vulnerability is due to a validation error in the application when handling a request. A remote unauthenticated attacker may be able to exploit this to add a malicious administrator user on the vulnerable system.
Affected Products
WordPress WPGateway Plugin <= 3.5
Impact
Security Bypass: Remote attackers can bypass security features of vulnerable systems.
Recommended Actions
Currently we are unaware of any vendor supplied patch or updates available for this issue.
