Lucene search
Wpl0v3rPATCHSTACK:A2FF94DB7DABA32A2185DA2BE5AEB6E9HistoryJan 09, 2018 - 12:00 a.m.
WordPress ImageInject plugin 1.15 - Cross-Site Request Forgery vulnerability
2018-01-0900:00:00
wpl0v3r
patchstack.com
7
EPSS
0.003
Percentile
70.9%
Cross-Site Request Forgery vulnerability found by wpl0v3r in WordPress ImageInject plugin (version 1.15). Vulnerable via wp-admin/options-general.php.
Solution
1/9/2018 - we were unable to find a patched version of the plugin. Dangerous to use.
Related
prion
prion
Cross site request forgery (csrf)
2018-01-08 07:29:00
nvd
nvd
CVE-2018-5285
2018-01-08 07:29:00
cvelist
cvelist
CVE-2018-5285
2018-01-08 07:00:00
cve
cve
CVE-2018-5285
2018-01-08 07:29:00
openvas
openvas
WordPress ImageInject Plugin < 1.16 Multiple Vulnerabilities
2018-01-09 00:00:00
wpvulndb
wpvulndb
ImageInject <= 1.15 - Stored XSS & CSRF
2018-01-04 00:00:00