WordPress Plugin Vulnerabilities

Dtracker <= 1.5 - Unauthorised Contract Creation

Description

Plugin is still affected and has been closed.

Affects Plugins

Plugin icon
dtracker
No known fix

References

CVE
CVE-2017-1002006
CVE
CVE-2017-1002007
URL
http://www.vapidlabs.com/advisory.php?v=186

Miscellaneous

Verified
No
WPVDB ID
e65250bd-5727-4e8f-b4c9-67c70fe63816

Timeline

Publicly Published
2017-03-13 (about 9 years ago)
Added
2019-08-24 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2017-05-16
Title
WordPress 2.5.0-4.7.4 - Post Meta Data Values Improper Handling in XML-RPC
Published
2017-03-17
Title
BuddyPress Docs <= 1.9.2 - Authenticated Lack of Authorisation
Published
2024-06-18
Title
Login with phone number < 1.7.35 - Insecure Password Reset Mechanism
Published
2023-06-12
Title
Protect WP Admin < 4.0 - Unauthenticated Protection Bypass
Published
2022-04-13
Title
RSFirewall < 1.1.25 - IP Block Bypass