Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9rpf-8285-qqrv

Опубликовано: 16 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.9

Описание

The Allow PHP in Posts and Pages plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.0.4 via the 'php' shortcode. This allows authenticated attackers with subscriber-level permissions or above, to execute code on the server.

The Allow PHP in Posts and Pages plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.0.4 via the 'php' shortcode. This allows authenticated attackers with subscriber-level permissions or above, to execute code on the server.

EPSS

Процентиль: 78%
0.0115
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 9.9
nvd
больше 2 лет назад

The Allow PHP in Posts and Pages plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.0.4 via the 'php' shortcode. This allows authenticated attackers with subscriber-level permissions or above, to execute code on the server.

EPSS

Процентиль: 78%
0.0115
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-94