CVE-2014-125102
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
49.6%
A vulnerability classified as problematic was found in Bestwebsoft Relevant Plugin up to 1.0.7 on WordPress. Affected by this vulnerability is an unknown functionality of the component Thumbnail Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 1.0.8 is able to address this issue. The identifier of the patch is 860d1891025548cf0f5f97364c1f51a888f523c3. It is recommended to upgrade the affected component. The identifier VDB-230113 was assigned to this vulnerability.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bestwebsoft | relevant | 1.0.0 | cpe:2.3:a:bestwebsoft:relevant:1.0.0:*:*:*:*:*:*:* |
| bestwebsoft | relevant | 1.0.1 | cpe:2.3:a:bestwebsoft:relevant:1.0.1:*:*:*:*:*:*:* |
| bestwebsoft | relevant | 1.0.2 | cpe:2.3:a:bestwebsoft:relevant:1.0.2:*:*:*:*:*:*:* |
| bestwebsoft | relevant | 1.0.3 | cpe:2.3:a:bestwebsoft:relevant:1.0.3:*:*:*:*:*:*:* |
| bestwebsoft | relevant | 1.0.4 | cpe:2.3:a:bestwebsoft:relevant:1.0.4:*:*:*:*:*:*:* |
| bestwebsoft | relevant | 1.0.5 | cpe:2.3:a:bestwebsoft:relevant:1.0.5:*:*:*:*:*:*:* |
| bestwebsoft | relevant | 1.0.6 | cpe:2.3:a:bestwebsoft:relevant:1.0.6:*:*:*:*:*:*:* |
| bestwebsoft | relevant | 1.0.7 | cpe:2.3:a:bestwebsoft:relevant:1.0.7:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "Bestwebsoft",
"product": "Relevant Plugin",
"versions": [
{
"version": "1.0.0",
"status": "affected"
},
{
"version": "1.0.1",
"status": "affected"
},
{
"version": "1.0.2",
"status": "affected"
},
{
"version": "1.0.3",
"status": "affected"
},
{
"version": "1.0.4",
"status": "affected"
},
{
"version": "1.0.5",
"status": "affected"
},
{
"version": "1.0.6",
"status": "affected"
},
{
"version": "1.0.7",
"status": "affected"
}
],
"modules": [
"Thumbnail Handler"
]
}
]Related
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
49.6%