Lucene search
Nicolas Buzy-DebatPATCHSTACK:27C043CF7F70C3C4FDD46B4286E94466HistoryJan 30, 2018 - 12:00 a.m.
WordPress Splashing Images plugin <=2.1 - Authenticated PHP Object Injection vulnerability
2018-01-3000:00:00
Nicolas Buzy-Debat
patchstack.com
3
0.014 Low
EPSS
Percentile
86.5%
Authenticated PHP Object Injection vulnerability found by Nicolas Buzy-Debat in WordPress Splashing Images plugin (versions <=2.1). PHP Object Injection attack via crafted serialized data in the ‘session’ HTTP GET parameter to wp-admin/upload.php.
Solution
Update the WordPress Splashing Images plugin to the latest available version (at least 2.1.1).
| CPE | Name | Operator | Version |
|---|---|---|---|
| splashing images | le | 2.1 |
Related
wpvulndb
wpvulndb
Splashing Images <= 2.1 - Authenticated PHP Object Injection
2018-01-26 00:00:00
nvd
nvd
CVE-2018-6195
2018-01-30 20:29:00
cvelist
cvelist
CVE-2018-6195
2018-01-30 20:00:00
prion
prion
Design/Logic Flaw
2018-01-30 20:29:00
cve
cve
CVE-2018-6195
2018-01-30 20:29:00
packetstorm
packetstorm
WordPress Splashing Images 2.1 Cross Site Scripting / PHP Object Injection
2018-01-26 00:00:00