Approved changes feed: RSS · Atom

cpe:2.3:a:gravity_wiz:gp_unique_id:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGravity Wiz (cac62f72-787d-5a8d-a926-0fe053db3589)
ProductGp Unique Id (b8f8eb46-3f55-5bde-8a0a-e06ff4b9cfeb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-0710 vulnerable 2026-06-08 06:22:01.822808 GP Unique ID <= 1.5.5 - Unauthenticated Form Submission Unique ID Modification
MEDIUM (5.3)
The GP Unique ID plugin for WordPress is vulnerable to Unique ID Modification in all versions up to, and including, 1.5.5. This is due to insufficient input validation. This makes it possible for unauthenticated attackers to tamper with the generation of a unique ID on a form submission and replace the generated unique ID with a user-controlled one, leading to a loss of integrity in cases where the ID's uniqueness is relied upon in a security-specific context.
Published: 2024-05-02T16:57:15.807Z
Updated: 2026-04-08T16:42:50.031Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.