Apocalypse Meow 21.1.3 - 21.2.7 - Authentication Bypass
2017-12-03 00:00
SteveStrategic Overview
StatusPatched in 21.2.8
Affected PluginApocalypse Meow
Affected Version
21.1.3 – 21.2.7CVSS9.8Critical
CVE
N/AVulnerability Overview
The Apocalypse Meow plugin for WordPress is vulnerable to Authentication Bypass in versions 21.1.3 - 21.2.7. This is due to improper validation via bcrypt. This makes it possible for unauthenticated attackers to bypass the authentication check.
Technical Analysis
REMEDIATION: Update to version 21.2.8, or a newer patched version --- IDENTIFIER: CWE-261 (Weak Encoding for Password) Obscuring a password with a trivial encoding does not protect the password.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C