WordPress Plugin Vulnerabilities

Apocalypse Meow 21.1.3-21.2.7 - BCrypt Authentication Bypass

Description

Requires bcrypt to be enabled.

Affects Plugins

Plugin icon
apocalypse-meow
Fixed in 21.2.8

References

URL
https://plugins.trac.wordpress.org/changeset/1780072/apocalypse-meow
URL
https://twitter.com/Sc00bzT/status/937124418500866048

Classification

Type
AUTHBYPASS
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-287

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
6d0f45cf-a122-491a-b192-aa627f038466

Timeline

Publicly Published
2017-12-03 (about 6 years ago)
Added
2017-12-04 (about 6 years ago)
Last Updated
2019-11-01 (about 4 years ago)

Other

Published
Title
Published
2014-08-01
Title
Easy Photo Album <= 1.1.5 - Album Information Disclosure
Published
2015-03-21
Title
WP Marketplace <= 2.4.0 - Arbitrary File Download
Published
2014-08-01
Title
Spam Free Plugin 1.9.2 - IP Blocklist Restriction Bypass
Published
2023-11-24
Title
Theme My Login 2FA < 1.2 - Lack of Rate Limiting
Published
2023-10-25
Title
Admin and Site Enhancements (ASE) < 5.8.0 - Password Protection Mode Security Feature Bypass