Aller au contenu
Se connecter
Non notée

CVE-2021-25053 The WP Coder WordPress plugin before 2.5.2 within the wow-company admin menu page allows to include() arbitrary file…

Description

The WP Coder WordPress plugin before 2.5.2 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.

Produits et versions touchés

Produit Versions touchées Corrigé en
WP Coder – add custom html, css and js code 2.5 premières → < 2.5.2 2.5.2

Autres CVE de WP Coder – add custom html, css and js code

Les 2 CVE de WP Coder – add custom html, css and js code →
CVE-2022-2388 The WP Coder WordPress plugin before 2.5.3 does not have CSRF check in place when deleting code created by the plugin,… Non notée
Suivre cette CVE