Lucene search

CVE-2018-12895

🗓️ 26 Jun 2018 20:00:29Reported by [email protected]Type

WordPress 4.9.6 Arbitrary Code Execution via Directory Traversa

Reporter	Title	Published	Views	Family All 34
Veracode	Arbitrary File Deletion	27 Jun 201805:49	–	veracode
0day.today	Wordpress 4.9.6 - Arbitrary File Deletion (Authenticated) Exploit	25 Oct 202100:00	–	zdt
OpenVAS	WordPress Arbitrary File Deletion Vulnerability (Jun 2018) - Windows	27 Jun 201800:00	–	openvas
OpenVAS	WordPress Arbitrary File Deletion Vulnerability (Jun 2018) - Linux	27 Jun 201800:00	–	openvas
OpenVAS	Fedora Update for wordpress FEDORA-2018-e69d2aaa60	1 Jan 201900:00	–	openvas
OpenVAS	Fedora Update for wordpress FEDORA-2019-8606c6da35	28 Mar 201900:00	–	openvas
OpenVAS	Fedora Update for wordpress FEDORA-2018-8fc2cb8cb0	15 Jul 201800:00	–	openvas
OpenVAS	Debian: Security Advisory (DSA-4250-1)	17 Jul 201800:00	–	openvas
OpenVAS	Fedora Update for wordpress FEDORA-2018-623df1e98d	15 Jul 201800:00	–	openvas
OpenVAS	Debian: Security Advisory (DLA-1452-1)	29 Jul 201800:00	–	openvas

Nvd

Node

wordpress wordpressRange<4.9.7

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Source	Link
blog	www.blog.ripstech.com/2018/wordpress-file-delete-to-code-execution/
wpvulndb	www.wpvulndb.com/vulnerabilities/9100
packetstormsecurity	www.packetstormsecurity.com/files/164633/WordPress-4.9.6-Arbitrary-File-Deletion.html
debian	www.debian.org/security/2018/dsa-4250
securityfocus	www.securityfocus.com/bid/104569
lists	www.lists.debian.org/debian-lts-announce/2018/07/msg00046.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Jun 2018 20:29Current

8.9High risk

Vulners AI Score8.9

CVSS26.5

CVSS38.8

EPSS0.42142

CWE-22