exploitDog

CVE-2019-17232

Опубликовано: 07 окт. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows unauthenticated options import.

Ссылки

https://blog.nintechnet.com/unauthenticated-options-import-vulnerability-in-wordpress-ultimate-faq-plugin/
Exploit
Third Party Advisory
https://wordpress.org/plugins/ultimate-faqs/#developers
Product
Release Notes
https://wpvulndb.com/vulnerabilities/9883
Third Party Advisory
https://blog.nintechnet.com/unauthenticated-options-import-vulnerability-in-wordpress-ultimate-faq-plugin/
Exploit
Third Party Advisory
https://wordpress.org/plugins/ultimate-faqs/#developers
Product
Release Notes
https://wpvulndb.com/vulnerabilities/9883
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:etoilewebdesign:ultimate_faq:*:*:*:*:*:wordpress:*:*

Версия до 1.8.24 (включая)

EPSS

Процентиль: 92%

0.08596

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-306

Связанные уязвимости

GHSA-w6r2-564w-p6vf

github

больше 3 лет назад

Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows unauthenticated options import.

EPSS

Процентиль: 92%

0.08596

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-306