Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin IMPress for IDX Broker Multiple Vulnerabilities - CVE-2020-11512 - Vulnerability Database
WP Plugin Idx Broker Platinum

WordPress Plugin IMPress for IDX Broker Multiple Vulnerabilities - CVE-2020-11512

High
Reference: CVE-2020-11512
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-11512
Title: WordPress Plugin IMPress for IDX Broker Multiple Vulnerabilities
Overview:

WordPress Plugin IMPress for IDX Broker is prone to multiple vulnerabilities including cross-site scripting and security bypass. Exploiting these issues could allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site to steal cookie-based authentication credentials or to perform otherwise restricted actions and subsequently delete any page or post on the site in addition to creating pages with arbitrary titles. WordPress Plugin IMPress for IDX Broker version 2.6.1 is vulnerable prior versions may also be affected.