CVE-2020-13693 - An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled

CRITICAL

An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled

Published May 28, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 43.88%

An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled.

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

Link	Providers	Tags
http://packetstormsecurity.com/files/157885/WordPress-BBPress-2.5-Privilege-Escalation.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://bbpress.org/blog/2020/05/bbpress-2-6-5-is-out		x_refsource_MISCRelease NotesVendor Advisory
https://codex.bbpress.org/releases		x_refsource_MISCRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4643		Advisory
https://github.com/advisories/GHSA-mwxh-6j9v-45ph		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-13693
https://wordpress.org/plugins/bbpress/#developers		x_refsource_MISCRelease NotesThird Party Advisory