Описание
The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 6.9.0 (исключая)
cpe:2.3:a:wptaskforce:wpcargo_track_\&_trace:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 100%
0.92018
Критический
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-94
CWE-434
Связанные уязвимости
CVSS3: 9.8
github
почти 4 года назад
The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE
EPSS
Процентиль: 100%
0.92018
Критический
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-94
CWE-434