Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-82cf-jc67-6j74

Опубликовано: 18 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'uncode_admin_get_oembed' function in all versions up to, and including, 2.9.1.6. This makes it possible for unauthenticated attackers to read arbitrary files on the server.

The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'uncode_admin_get_oembed' function in all versions up to, and including, 2.9.1.6. This makes it possible for unauthenticated attackers to read arbitrary files on the server.

EPSS

Процентиль: 72%
0.00701
Низкий

7.5 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.5
nvd
12 месяцев назад

The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'uncode_admin_get_oembed' function in all versions up to, and including, 2.9.1.6. This makes it possible for unauthenticated attackers to read arbitrary files on the server.

EPSS

Процентиль: 72%
0.00701
Низкий

7.5 High

CVSS3

Дефекты

CWE-20