CVE-2011-10033

🗓️ 15 Oct 2025 01:23:46Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 6 Views🌐 WEB

WordPress is-human plugin 1.4.2 has eval injection via type, enabling remote code execution.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2011-10033	15 Oct 202501:23	–	attackerkb
Circl	CVE-2011-10033	16 Oct 202521:02	–	circl
CNNVD	WordPress plugin is-human 安全漏洞	15 Oct 202500:00	–	cnnvd
Cvelist	CVE-2011-10033 WordPress Plugin is-human <= v1.4.2 Eval Injection RCE	15 Oct 202501:23	–	cvelist
EUVD	EUVD-2011-5263	15 Oct 202501:23	–	euvd
NVD	CVE-2011-10033	15 Oct 202502:15	–	nvd
OpenVAS	WordPress Is-human Plugin <= v1.4.2 'passthru()' Function RCE Vulnerability - Active Check	26 May 201100:00	–	openvas
Positive Technologies	PT-2025-42214	15 Oct 202500:00	–	ptsecurity
RedhatCVE	CVE-2011-10033	16 Oct 202501:41	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2011-10033	12 Mar 201200:00	–	vulncheck_kev

Vulners

CNA

Node

is-human_wordpress_plugin is-human_wordpress_pluginRange0–1.4.2

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "/is-human/engine.php"
    ],
    "product": "is-human WordPress Plugin",
    "vendor": "is-human WordPress Plugin",
    "versions": [
      {
        "lessThanOrEqual": "1.4.2",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/is-human/
trustwave	www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/honeypot-alert-more-wordpress-is_human-plugin-remote-command-injection-attack-detected/
exploit-db	www.exploit-db.com/exploits/17299
vulncheck	www.vulncheck.com/advisories/wordpress-plugin-is-human-eval-injection-rce
web	www.web.archive.org/web/20120115212202/http://blog.spiderlabs.com/2012/01/honeypot-alert-is-human-wordpress-plugin-remote-command-execution-attack-detected.html

Parameter	Position	Path	Description	CWE
type	query param	is-human/engine.php	Unsafe eval on user-supplied input via type parameter when action=log-reset enabling code execution.	CWE-95
action	query param	is-human/engine.php	Unsafe eval on user-supplied input via type parameter when action=log-reset enabling code execution.	CWE-95

15 May 2026 11:13Current

7.8High risk

Vulners AI Score7.8

CVSS 49.3

EPSS0.00152

SSVC

CWE-95