Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The UserPro plugin before 4.9.17.1 for WordPress, when used on a site with the "admin" username, allows remote attackers to bypass authentication and obtain administrative access via a "true" value for the up_auto_log parameter in the QUERY_STRING to the default URI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WordPress UserPro插件安全漏洞
Vulnerability Description
UserPro plugin for WordPress是一款使用在WordPress中的社交平台网站创建插件。该插件具有内容限制、账户验证和内容共享等功能。 WordPress UserPro插件4.9.17.1之前的版本中存在安全漏洞。远程攻击者可通过向默认的URI发送‘up_auto_log’参数为‘true’的QUERY_STRING利用该漏洞绕过身份验证，获取敏感的访问权限。
CVSS Information
N/A
Vulnerability Type
N/A