Advisories · Technology
whyun WPCOM Member.
Every CVE that names whyun WPCOM Member among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
WPCOM Member <= 1.7.27 - Unauthenticated Authentication Bypass via 'uuid' and 'code' Parameters on Social-Login Callback
- whyun WPCOM Member
- Authentication bypass
- CVSS 8.1 High
WPCOM Member <= 1.7.16 - Authentication Bypass via Weak OTP
- whyun WPCOM Member
- Authentication bypass
- CVSS 8.8 High
WPCOM Member <= 1.7.14 - Authenticated (Contributor+) Local File Inclusion via Shortcode
- whyun WPCOM Member
- File inclusion
- CVSS 7.5 High
WPCOM Member <= 1.7.6 - Unauthenticated Time-Based SQL Injection
- whyun WPCOM Member
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
WPCOM Member <= 1.7.5 - Authentication Bypass via 'user_phone'
- whyun WPCOM Member
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
WPCOM Member <= 1.5.2.1 - Unauthenticated Privilege Escalation via User Meta
- whyun WPCOM Member
- Privilege escalation