Количество 3
Количество 3
CVE-2023-6989
The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the render_action_template parameter. This makes it possible for unauthenticated attacker to include and execute PHP files on the server, allowing the execution of any PHP code in those files.
GHSA-72xj-cfw6-3c4q
The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the render_action_template parameter. This makes it possible for unauthenticated attacker to include and execute PHP files on the server, allowing the execution of any PHP code in those files.
BDU:2024-01090
Уязвимость функций setTemplate(), renderPhp() и path_join() плагина Shield Security – Smart Bot Blocking & Intrusion Prevention Security системы управления содержимым сайта WordPress, позволяющая нарушителю загрузить произвольные PHP-файлы
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-6989 The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the render_action_template parameter. This makes it possible for unauthenticated attacker to include and execute PHP files on the server, allowing the execution of any PHP code in those files. | CVSS3: 9.8 | 67% Средний | около 2 лет назад |
| GHSA-72xj-cfw6-3c4q The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the render_action_template parameter. This makes it possible for unauthenticated attacker to include and execute PHP files on the server, allowing the execution of any PHP code in those files. | CVSS3: 9.8 | 67% Средний | около 2 лет назад |
 | BDU:2024-01090 Уязвимость функций setTemplate(), renderPhp() и path_join() плагина Shield Security – Smart Bot Blocking & Intrusion Prevention Security системы управления содержимым сайта WordPress, позволяющая нарушителю загрузить произвольные PHP-файлы | CVSS3: 9.8 | 67% Средний | около 2 лет назад |
Уязвимостей на страницу