CVE-2019-1010209

2019-07-2314:15:13

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.7%

JSON

GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. The impact is: unauthenticated/unzuthorized Attacker can upload executable file in website. The component is: gourl.php#L5637. The fixed version is: 1.4.14.

CPENameOperatorVersion
bitcoin-wordpress-plugineq1.4.2
bitcoin-wordpress-plugineq1.3.11
bitcoin-wordpress-plugineq1.4.0
bitcoin-wordpress-plugineq1.4.5
bitcoin-wordpress-plugineq1.3.14
bitcoin-wordpress-plugineq1.3.17
bitcoin-wordpress-plugineq1.4.6
bitcoin-wordpress-plugineq1.4.3
bitcoin-wordpress-plugineq1.3.6
bitcoin-wordpress-plugineq1.4.9

Name	Operator	Version
bitcoin-wordpress-plugin	eq	1.4.2
bitcoin-wordpress-plugin	eq	1.3.11
bitcoin-wordpress-plugin	eq	1.4.0
bitcoin-wordpress-plugin	eq	1.4.5
bitcoin-wordpress-plugin	eq	1.3.14
bitcoin-wordpress-plugin	eq	1.3.17
bitcoin-wordpress-plugin	eq	1.4.6
bitcoin-wordpress-plugin	eq	1.4.3
bitcoin-wordpress-plugin	eq	1.3.6
bitcoin-wordpress-plugin	eq	1.4.9