Логотип exploitDog
bind:CVE-2024-6386
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-6386

Количество 3

Количество 3

nvd логотип

CVE-2024-6386

больше 1 года назад

The WPML plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.6.12 via the Twig Server-Side Template Injection. This is due to missing input validation and sanitization on the render function. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.

CVSS3: 9.9
EPSS: Высокий
github логотип

GHSA-q8gr-qpfg-hv8p

больше 1 года назад

The WPML plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.6.12 via the Twig Server-Side Template Injection. This is due to missing input validation and sanitization on the render function. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.

CVSS3: 9.9
EPSS: Высокий
fstec логотип

BDU:2024-06586

больше 1 года назад

Уязвимость плагина WPML системы управления содержимым сайта WordPress, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.9
EPSS: Высокий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-6386

The WPML plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.6.12 via the Twig Server-Side Template Injection. This is due to missing input validation and sanitization on the render function. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.

CVSS3: 9.9
74%
Высокий
больше 1 года назад
github логотип
GHSA-q8gr-qpfg-hv8p

The WPML plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.6.12 via the Twig Server-Side Template Injection. This is due to missing input validation and sanitization on the render function. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.

CVSS3: 9.9
74%
Высокий
больше 1 года назад
fstec логотип
BDU:2024-06586

Уязвимость плагина WPML системы управления содержимым сайта WordPress, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.9
74%
Высокий
больше 1 года назад

Уязвимостей на страницу