SiteSao vulnerabilities and threats

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2024-8420DHVC Form (WordPress plugin) · Incorrect Privilege Assignment Critical9.8EPSS 0.5%2025-02-28CVE Database V5CVE-2024-8420 The DHVC Form plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.7. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on sites. EPSS 0.5%Vulnerability SiteSao CWE-266	CVE Database V5	2025-02-28

Page 1 of 1