Travel Management < 1.7 - Unauthenticated Options Change

Affects Plugin

nd-travel
fixed in version 1.7

References

CVE 2019-15773
URL https://blog.nintechnet.com/privilege-escalation-vulnerability-in-wordpress-nd-travel-management-plugin/

Classification

Type PRIVESC
OWASP Top 10 A2: Broken Authentication and Session Management
CWE CWE-269

Miscellaneous

Original Researcher Jerome Bruandet (nintechnet.com)
Views 3711
Verified No
WPVDB ID 9491

Timeline

Publicly Published 2019-08-03 (2 months ago)
Added 2019-08-03 (2 months ago)
Last Updated 2019-08-29 (about 2 months ago)

Our Other Services

Online WordPress Vulnerability Scanner WPScan WordPress Security Plugin