exploitDog

CVE-2019-15780

Опубликовано: 29 авг. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The formidable plugin before 4.02.01 for WordPress has unsafe deserialization.

Ссылки

https://pentest.co.uk/labs/advisory/cve-2019-15780/
Third Party Advisory
https://raw.githubusercontent.com/Strategy11/formidable-forms/master/changelog.txt
Release Notes
Third Party Advisory
https://wordpress.org/plugins/formidable/#developers
Product
Third Party Advisory
https://wpvulndb.com/vulnerabilities/9935
Third Party Advisory
https://pentest.co.uk/labs/advisory/cve-2019-15780/
Third Party Advisory
https://raw.githubusercontent.com/Strategy11/formidable-forms/master/changelog.txt
Release Notes
Third Party Advisory
https://wordpress.org/plugins/formidable/#developers
Product
Third Party Advisory
https://wpvulndb.com/vulnerabilities/9935
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:strategy11:formidable_form_builder:*:*:*:*:*:wordpress:*:*

Версия до 4.02.01 (исключая)

EPSS

Процентиль: 78%

0.01105

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-502

Связанные уязвимости

GHSA-mqv2-q72x-2c94

CVSS3: 9.8

github

больше 3 лет назад

The formidable plugin before 4.02.01 for WordPress has unsafe deserialization.

EPSS

Процентиль: 78%

0.01105

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-502