Vulnerabilities > CVE-2020-13693 - Unspecified vulnerability in Bbpress

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

critical

exploit available

NVD

Published: 2020-05-29

Updated: 2024-11-21

Summary

An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled.

Part	Description	Count
Application	Bbpress Bbpress Bbpress 2.0.0 Bbpress Bbpress 2.0.1 Bbpress Bbpress 2.0.2 Bbpress Bbpress 2.1.0 Bbpress Bbpress 2.1.1 Bbpress Bbpress 2.1.2 Bbpress Bbpress 2.2.0 Bbpress Bbpress 2.2.1 Bbpress Bbpress 2.2.2 Bbpress Bbpress 2.2.3 Bbpress Bbpress 2.2.4 Bbpress Bbpress 2.3.0 Bbpress Bbpress 2.3.1 Bbpress Bbpress 2.3.2 Bbpress Bbpress 2.4.0 Bbpress Bbpress 2.4.1 Bbpress Bbpress 2.5.0 Bbpress Bbpress 2.5.1 Bbpress Bbpress 2.5.2 Bbpress Bbpress 2.5.3 Bbpress Bbpress 2.5.4 Bbpress Bbpress 2.5.5 Bbpress Bbpress 2.5.6 Bbpress Bbpress 2.5.7 Bbpress Bbpress 2.5.8 Bbpress Bbpress 2.5.9 Bbpress Bbpress 2.5.10 Bbpress Bbpress 2.5.11 Bbpress Bbpress 2.5.12 Bbpress Bbpress 2.5.13 Bbpress Bbpress 2.5.14 Bbpress Bbpress 2.6.0 Bbpress Bbpress 2.6.1 Bbpress Bbpress 2.6.2 Bbpress Bbpress 2.6.3 Bbpress Bbpress 2.6.4	36

id	EDB-ID:48534
last seen	2020-06-01
modified	2020-06-01
published	2020-06-01
reporter	Exploit-DB
source	https://www.exploit-db.com/download/48534
title	Wordpress Plugin BBPress 2.5 - Unauthenticated Privilege Escalation

data source	https://packetstormsecurity.com/files/download/157885/wpbbpress25-escalate.txt
id	PACKETSTORM:157885
last seen	2020-06-02
published	2020-05-30
reporter	Raphael Karger
source	https://packetstormsecurity.com/files/157885/WordPress-BBPress-2.5-Privilege-Escalation.html
title	WordPress BBPress 2.5 Privilege Escalation