CVE-2020-13764 Gravity Forms plugin leak hashed passwords
Attackers can retrieve hashed user passwords from Gravity Forms plugin due to improper property access handling.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-13764?
CVE-2020-13764 is a high-severity vulnerability in n/a, published on 2 Jun 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
common.php in the Gravity Forms plugin before 2.4.9 for WordPress can leak hashed passwords because user_pass is not considered a special case for a $current_user->get($property) call.
Weakness: CWE-200
Which versions are affected by CVE-2020-13764?
2 open source packages ship an affected version, including wp-premium/gravityforms. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
wp-premium/gravityforms Packagist | All versions | 2.4.9 |
wp-premium/gravityforms Packagist | All versions | 2.4.9 |
Products include Rocketgenius Gravityforms.
How do I fix CVE-2020-13764?
Upgrade wp-premium/gravityforms to 2.4.9 or later.
Is CVE-2020-13764 being exploited?
There is no known exploitation of CVE-2020-13764 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-m983-q76g-cwpq.