Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9mf7-4chh-h4p8

Опубликовано: 22 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The Block Logic – Full Gutenberg Block Display Control plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.8 via the block_logic_check_logic function. This is due to the unsafe evaluation of user-controlled input. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.

The Block Logic – Full Gutenberg Block Display Control plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.8 via the block_logic_check_logic function. This is due to the unsafe evaluation of user-controlled input. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.

EPSS

Процентиль: 79%
0.01226
Низкий

8.8 High

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 8.8
nvd
11 месяцев назад

The Block Logic – Full Gutenberg Block Display Control plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.8 via the block_logic_check_logic function. This is due to the unsafe evaluation of user-controlled input. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.

CVSS3: 8.8
fstec
11 месяцев назад

Уязвимость плагина для управления отображением блоков Block Logic системы управления содержимым сайта WordPress связана с неверным управлением генерацией кода, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 79%
0.01226
Низкий

8.8 High

CVSS3

Дефекты

CWE-94