exploitDog

CVE-2025-49029

Опубликовано: 01 июл. 2025

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

Improper Control of Generation of Code ('Code Injection') vulnerability in bitto.Kazi Custom Login And Signup Widget allows Code Injection.This issue affects Custom Login And Signup Widget: from n/a through 1.0.

Ссылки

https://patchstack.com/database/wordpress/plugin/custom-login-and-signup-widget/vulnerability/wordpress-custom-login-and-signup-widget-plugin-1-0-arbitrary-code-execution-vulnerability?_s_id=cve

EPSS

Процентиль: 43%

0.0021

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

GHSA-4mv9-2h4p-3hrx

CVSS3: 9.1

github

7 месяцев назад

Improper Control of Generation of Code ('Code Injection') vulnerability in bitto.Kazi Custom Login And Signup Widget allows Code Injection.This issue affects Custom Login And Signup Widget: from n/a through 1.0.

EPSS

Процентиль: 43%

0.0021

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-94