GHSA-mwxh-6j9v-45ph
bbPress unauthenticated privilege-escalation
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | bbpress/bbpress | < 2.6.5 | 2.6.5 |
Details
As written in the advisory (Markdown source, shown as plain text).
An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2020-13693
- https://bbpress.org/blog/2020/05/bbpress-2-6-5-is-out
- https://codex.bbpress.org/releases
- https://github.com/bbpress/bbPress
- https://wordpress.org/plugins/bbpress/#developers
- http://packetstormsecurity.com/files/157885/WordPress-BBPress-2.5-Privilege-Escalation.html