CVE-2017-1002007

Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save_mail.php doesn't check that the user is authorized before injecting new contacts into the wp_contact table.

Score

CVSS 3.0 7.5 High

Status

Modified - larry0@me.com

Published

2017-09-14

Last modified

2024-08-05

Weaknesses

CWE-862

Affected products

• Dtracker (Dtracker Project)
• Dtracker (Itflux)

References

• http://www.securityfocus.com/bid/96890
• http://www.vapidlabs.com/advisory.php?v=186
• https://wordpress.org/plugins/dtracker/