Authentication Bypass Vulnerability in WP Directorybox Manager Plugin for WordPress

CVE-2024-13182

What is CVE-2024-13182?

The WP Directorybox Manager plugin for WordPress is susceptible to an authentication bypass flaw across all versions up to and including 2.5. This vulnerability stems from improper authentication mechanisms within the 'wp_dp_parse_request' function, allowing unauthenticated users to gain unauthorized access to existing accounts, including those of administrators. Website owners should take immediate action to safeguard their sites against this risk.

References