CVE-2016-15004

Опубликовано: 23 июл. 2022

Источник: nvd

CVSS3: 7.3

CVSS3: 9.8

EPSS Низкий

Описание

A vulnerability was found in InfiniteWP Client Plugin 1.5.1.3/1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to injection. The attack can be launched remotely. Upgrading to version 1.6.1.1 is able to address this issue. It is recommended to upgrade the affected component.

Ссылки

http://seclists.org/fulldisclosure/2017/Jan/72
Exploit
Mailing List
Third Party Advisory
https://sumofpwn.nl/advisory/2016/infinitewp_client_wordpress_plugin_unauthenticated_php_object_injection_vulnerability.html
Exploit
Third Party Advisory
https://vuldb.com/?id.96073
Third Party Advisory
http://seclists.org/fulldisclosure/2017/Jan/72
Exploit
Mailing List
Third Party Advisory
https://sumofpwn.nl/advisory/2016/infinitewp_client_wordpress_plugin_unauthenticated_php_object_injection_vulnerability.html
Exploit
Third Party Advisory
https://vuldb.com/?id.96073
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:revmakx:infinitewp_client:1.5.1.3:*:*:*:*:wordpress:*:*

cpe:2.3:a:revmakx:infinitewp_client:1.6.0:*:*:*:*:wordpress:*:*

EPSS

Процентиль: 81%

0.01576

Низкий

7.3 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-74

Связанные уязвимости

GHSA-6645-42mw-qcmm

CVSS3: 9.8

github

больше 3 лет назад

EPSS

Процентиль: 81%

0.01576

Низкий

7.3 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-74