CVE-2015-9316

Опубликовано: 14 авг. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppolls_ajax_request via the poll_id parameter.

Ссылки

https://wordpress.org/plugins/wp-fastest-cache/#developers
Release Notes
Third Party Advisory
https://www.exploit-db.com/exploits/38678
Exploit
Third Party Advisory
VDB Entry
https://wordpress.org/plugins/wp-fastest-cache/#developers
Release Notes
Third Party Advisory
https://www.exploit-db.com/exploits/38678
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wpfastestcache:wp_fastest_cache:*:*:*:*:*:wordpress:*:*

Версия до 0.8.4.9 (исключая)

EPSS

Процентиль: 81%

0.01484

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-84px-7vmm-29r8