Aller au contenu
Se connecter
9.8 Critique

CVE-2024-6330 The GEO my WP WordPress plugin before 4.5.0.2 does not prevent unauthenticated attackers from including arbitrary…

Description

The GEO my WP WordPress plugin before 4.5.0.2 does not prevent unauthenticated attackers from including arbitrary files in PHP's execution context, which leads to Remote Code Execution.

Produits et versions touchés

Produit Versions touchées Corrigé en
GEO my WP 4.5 premières → < 4.5.0.2 4.5.0.2
geo_my_wp 4.5 premières → < 4.5.0.2 4.5.0.2

Autres CVE de GEO my WP

Les 3 CVE de GEO my WP →
CVE-2026-15260 The GEO my WP WordPress plugin before 4.5.5.3 does not perform any ownership or capability check on two of its logged-in… 4.3 Moyenne CVE-2024-9422 The GEO my WP WordPress plugin before 4.5, gmw-premium-settings WordPress plugin before 3.1 does not sufficiently… 6.6 Moyenne
Suivre cette CVE