← Back

Wordable

wordable

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Wordable
wordable
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-36724
1Wordable
1Wordable
Jun 17, 2026
Jun 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The Wordable plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.1. This is due to the use of a user supplied hashing algorithm passed to the hash_hmac() function and the use...Show more
The Wordable plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.1. This is due to the use of a user supplied hashing algorithm passed to the hash_hmac() function and the use of a loose comparison on the hash which allows an attacker to trick the function into thinking it has a valid hash. This makes it possible for unauthenticated attackers to gain administrator privileges.Show less