Описание
The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allow them to run arbitrary code on servers hosting their site, even in MultiSite configurations.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:esterox:business_card:1.0.0:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 71%
0.00674
Низкий
7.2 High
CVSS3
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 7.2
github
больше 1 года назад
The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allow them to run arbitrary code on servers hosting their site, even in MultiSite configurations.
EPSS
Процентиль: 71%
0.00674
Низкий
7.2 High
CVSS3
Дефекты
NVD-CWE-noinfo