exploitDog

CVE-2017-18604

Опубликовано: 10 сент. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request.

Ссылки

https://wordpress.org/plugins/sitebuilder-dynamic-components/#developers
Third Party Advisory
https://wpvulndb.com/vulnerabilities/8829
Exploit
Third Party Advisory
https://wordpress.org/plugins/sitebuilder-dynamic-components/#developers
Third Party Advisory
https://wpvulndb.com/vulnerabilities/8829
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sitebuilder_dynamic_components_project:sitebuilder_dynamic_components:*:*:*:*:*:wordpress:*:*

Версия до 1.0 (включая)

EPSS

Процентиль: 59%

0.0038

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-74

Связанные уязвимости

GHSA-qgr2-wq96-wch2

CVSS3: 7.5

github

больше 3 лет назад

The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request.

EPSS

Процентиль: 59%

0.0038

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-74