exploitDog

CVE-2025-60114

Опубликовано: 26 сент. 2025

Источник: nvd

CVSS3: 6.6

EPSS Низкий

Описание

Improper Control of Generation of Code ('Code Injection') vulnerability in YayCommerce YayCurrency allows Code Injection. This issue affects YayCurrency: from n/a through 3.2.

Ссылки

https://patchstack.com/database/wordpress/plugin/yaycurrency/vulnerability/wordpress-yaycurrency-plugin-3-2-remote-code-execution-rce-vulnerability?_s_id=cve

EPSS

Процентиль: 22%

0.00073

Низкий

6.6 Medium

CVSS3

Дефекты

CWE-94

Связанные уязвимости

GHSA-rv66-8mrq-4ghc

CVSS3: 6.6

github

4 месяца назад

Improper Control of Generation of Code ('Code Injection') vulnerability in YayCommerce YayCurrency allows Code Injection. This issue affects YayCurrency: from n/a through 3.2.

EPSS

Процентиль: 22%

0.00073

Низкий

6.6 Medium

CVSS3

Дефекты

CWE-94