An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when
    New User Registration is enabled. (CVE-2020-13693)

The WordPress bbPress Plugin installed on the remote host is affected by a privilege escalation vulnerability.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
433775	SCA: security update for bbpress/bbpress (GHSA-mwxh-6j9v-45ph)	Tenable Cloud Security	SCA Checks	Local	critical
433775	SCA: security update for bbpress/bbpress (GHSA-mwxh-6j9v-45ph)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical
112480	bbPress Plugin for WordPress < 2.6.5 Privilege Escalation	Web App Scanning	Component Vulnerability	Version Based	critical

Detections

Analytics

CVE-2020-13693

critical

Tenable Plugins

critical

critical

critical