Lucene search
Gerard ArallPATCHSTACK:D99C3B41E4320E9DE02D5E8913DA63A4HistoryMar 09, 2020 - 12:00 a.m.
WordPress WPML plugin <= 4.3.6 - Authenticated Cross-Site Request Forgery (CSRF) vulnerability leading to Remote Code Execution (RCE)
2020-03-0900:00:00
Gerard Arall
patchstack.com
11
0.006 Low
EPSS
Percentile
78.2%
Authenticated Cross-Site Request Forgery (CSRF) vulnerability leading to Remote Code Execution (RCE) discovered by Gerard Arall in WordPress WPML plugin (versions <= 4.3.6).
Solution
Update the WordPress WPML plugin to the latest available version (at least 4.3.7).
| CPE | Name | Operator | Version |
|---|---|---|---|
| wpml - wordpress multilingual | le | 4.3.6 |
Related
prion
prion
Remote code execution
2020-03-14 14:15:00
cvelist
cvelist
CVE-2020-10568
2020-03-14 13:50:04
cve
cve
CVE-2020-10568
2020-03-14 14:15:11
wpvulndb
wpvulndb
nvd
nvd
CVE-2020-10568
2020-03-14 14:15:11