Описание
The Social Warfare plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.5.2 via the 'swp_url' parameter. This allows attackers to execute code on the server.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- Third Party Advisory
- ExploitThird Party AdvisoryVDB Entry
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.5.3 (исключая)
cpe:2.3:a:warfareplugins:social_warfare:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 92%
0.07986
Низкий
10 Critical
CVSS3
9.8 Critical
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-94
Связанные уязвимости
CVSS3: 10
github
около 2 лет назад
The Social Warfare plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.5.2 via the 'swp_url' parameter. This allows attackers to execute code on the server.
EPSS
Процентиль: 92%
0.07986
Низкий
10 Critical
CVSS3
9.8 Critical
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-94