vulnerability

WordPress Plugin: wp-central: CVE-2020-9043: Improper Privilege Management

Severity
9
CVSS
(AV:N/AC:L/Au:S/C:C/I:C/A:C)
Published
Feb 17, 2020
Added
May 15, 2025
Modified
May 15, 2025

Description

The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key which makes it possible for an unauthenticated user to log-in to a vulnerable site as an administrator.

Solution

wp-central-plugin-cve-2020-9043
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.