| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | Exploit for CVE-2017-20251 | 9 Jun 202616:24 | – | githubexploit |
 | CVE-2017-20251 | 9 Jun 202613:12 | – | circl |
 | WordPress plugin Insert PHP 代码注入漏洞 | 9 Jun 202600:00 | – | cnnvd |
 | CVE-2017-20251 WordPress Insert PHP Plugin 4.7.0 PHP Code Injection via REST API | 9 Jun 202611:48 | – | cvelist |
 | EUVD-2017-18977 | 9 Jun 202611:48 | – | euvd |
 | By-Poloss..-..CVE-2017-20251 | 5 Oct 202608:56 | – | kitploit |
 | CVE-2017-20251 | 9 Jun 202613:16 | – | nvd |
 | PT-2026-47774 | 9 Jun 202600:00 | – | ptsecurity |
 | CVE-2017-20251: Improper Control of Generation of Code | 9 Jun 202600:00 | – | rapid7 |
 | CVE-2017-20251 WordPress Insert PHP Plugin 4.7.0 PHP Code Injection via REST API | 9 Jun 202611:48 | – | vulnrichment |
Node
[
{
"vendor": "Themeisle",
"product": "Woody Code Snippets",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "3.3.1"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| content | request body | /wp-json/wp/v2/posts | PHP code injection via [insert_php] shortcode processed when creating a post through the WordPress REST API. | CWE-94 |
| content | request body | /wp-json/wp/v2/posts/1234 | Crafted post content contains [insert_php] that enables code execution on the server when processed by the plugin. | CWE-94 |
| p | query param | /?p=POST_ID | Trigger RCE by loading a post that contains malicious shortcode, causing the server to execute injected PHP. | CWE-94 |
| cmd | query param | /shell.php | Verification step where attacker attempts to run commands via the injected shell script (RCE proof). | CWE-94 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Jul 2026 07:10Current
6.5Medium risk
Vulners AI Score6.5
CVSS 49.3
CVSS 3.19.8
EPSS0.00559
SSVC