CVE-2017-1002001

Опубликовано: 14 сент. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

Vulnerability in wordpress plugin mobile-app-builder-by-wappress v1.05, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com.

Ссылки

http://www.vapidlabs.com/advisory.php?v=180
Exploit
Third Party Advisory
https://wordpress.org/plugins-wp/mobile-app-builder-by-wappress/
Not Applicable
https://www.exploit-db.com/exploits/41540/
Exploit
Third Party Advisory
VDB Entry
http://www.vapidlabs.com/advisory.php?v=180
Exploit
Third Party Advisory
https://wordpress.org/plugins-wp/mobile-app-builder-by-wappress/
Not Applicable
https://www.exploit-db.com/exploits/41540/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mobile-app-builder-by-wappress_project:mobile-app-builder-by-wappress:1.05:*:*:*:*:wordpress:*:*

EPSS

Процентиль: 97%

0.44532

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-9vv2-fjqm-pf4v