Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7xp2-7hw7-rv8q

Опубликовано: 18 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers to make logged in users perform unwanted actions leading to remote code execution.

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers to make logged in users perform unwanted actions leading to remote code execution.

EPSS

Процентиль: 73%
0.00756
Низкий

8.8 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8.8
nvd
около 2 лет назад

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers to make logged in users perform unwanted actions leading to remote code execution.

EPSS

Процентиль: 73%
0.00756
Низкий

8.8 High

CVSS3

Дефекты

CWE-352