Логотип exploitDog
bind:CVE-2024-13681
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-13681

Количество 2

Количество 2

nvd логотип

CVE-2024-13681

12 месяцев назад

The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'uncode_admin_get_oembed' function in all versions up to, and including, 2.9.1.6. This makes it possible for unauthenticated attackers to read arbitrary files on the server.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-82cf-jc67-6j74

12 месяцев назад

The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'uncode_admin_get_oembed' function in all versions up to, and including, 2.9.1.6. This makes it possible for unauthenticated attackers to read arbitrary files on the server.

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-13681

The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'uncode_admin_get_oembed' function in all versions up to, and including, 2.9.1.6. This makes it possible for unauthenticated attackers to read arbitrary files on the server.

CVSS3: 7.5
1%
Низкий
12 месяцев назад
github логотип
GHSA-82cf-jc67-6j74

The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'uncode_admin_get_oembed' function in all versions up to, and including, 2.9.1.6. This makes it possible for unauthenticated attackers to read arbitrary files on the server.

CVSS3: 7.5
1%
Низкий
12 месяцев назад

Уязвимостей на страницу