Описание
The Import any XML or CSV File to WordPress plugin before 3.6.9 is not properly filtering which file extensions are allowed to be imported on the server, which could allow administrators in multi-site WordPress installations to upload arbitrary files
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.6.9 (исключая)
cpe:2.3:a:soflyy:wp_all_import:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 80%
0.01356
Низкий
7.2 High
CVSS3
Дефекты
CWE-94
CWE-94
Связанные уязвимости
CVSS3: 7.2
github
больше 3 лет назад
The Import any XML or CSV File to WordPress plugin before 3.6.9 is not properly filtering which file extensions are allowed to be imported on the server, which could allow administrators in multi-site WordPress installations to upload arbitrary files
EPSS
Процентиль: 80%
0.01356
Низкий
7.2 High
CVSS3
Дефекты
CWE-94
CWE-94