Lucene search

K
patchstackNguyen Duy Quoc KhanhPATCHSTACK:D9125236EC488106FF5F2227B3382AC3
HistoryOct 10, 2022 - 12:00 a.m.

WordPress Ocean Extra plugin <= 2.0.4 - Auth. PHP Objection Injection vulnerability

2022-10-1000:00:00
Nguyen Duy Quoc Khanh
patchstack.com
82

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Auth. PHP Objection Injection vulnerability discovered by Nguyen Duy Quoc Khanh in the WordPress Ocean Extra plugin (versions <= 2.0.4).

Solution

           Update the WordPress Ocean Extra plugin to the latest available version (at least 2.0.5).
CPENameOperatorVersion
ocean extrale2.0.4

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Related for PATCHSTACK:D9125236EC488106FF5F2227B3382AC3