Lucene search

K
cveVulDBCVE-2016-15004
HistoryJul 23, 2022 - 7:15 a.m.

CVE-2016-15004

2022-07-2307:15:07
CWE-74
VulDB
web.nvd.nist.gov
29
5
cve-2016-15004
infinitewp
client plugin
vulnerability
injection
upgrade
remote attack

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.003

Percentile

71.9%

A vulnerability was found in InfiniteWP Client Plugin 1.5.1.3/1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to injection. The attack can be launched remotely. Upgrading to version 1.6.1.1 is able to address this issue. It is recommended to upgrade the affected component.

Affected configurations

Nvd
Vulners
Node
revmakxinfinitewp_clientMatch1.5.1.3wordpress
OR
revmakxinfinitewp_clientMatch1.6.0wordpress
VendorProductVersionCPE
revmakxinfinitewp_client1.5.1.3cpe:2.3:a:revmakx:infinitewp_client:1.5.1.3:*:*:*:*:wordpress:*:*
revmakxinfinitewp_client1.6.0cpe:2.3:a:revmakx:infinitewp_client:1.6.0:*:*:*:*:wordpress:*:*

CNA Affected

[
  {
    "product": "InfiniteWP Client Plugin",
    "vendor": "unspecified",
    "versions": [
      {
        "status": "affected",
        "version": "1.5.1.3"
      },
      {
        "status": "affected",
        "version": "1.6.0"
      }
    ]
  }
]

Social References

More

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.003

Percentile

71.9%

Related for CVE-2016-15004