Lucene search
Christian Angel (KALASAG CERT)PATCHSTACK:DBDA38F9038283E65E7C02BF3393F9B1HistoryApr 17, 2019 - 12:00 a.m.
WordPress SupportCandy plugin <= 2.0.0 - Arbitrary File Upload vulnerability
2019-04-1700:00:00
Christian Angel (KALASAG CERT)
patchstack.com
4
0.064 Low
EPSS
Percentile
93.7%
Arbitrary File Upload vulnerability discovered by Christian Angel (KALASAG CERT) in WordPress SupportCandy plugin (versions <= 2.0.0).
Solution
Update the WordPress SupportCandy plugin to the latest available version (at least 2.0.1).
| CPE | Name | Operator | Version |
|---|---|---|---|
| supportcandy | le | 2.0.0 |
Related
cve
cve
CVE-2019-11223
2019-04-18 18:29:00
wpvulndb
wpvulndb
SupportCandy <= 2.0.0 - Arbitrary File Upload
2019-04-17 00:00:00
openvas
openvas
WordPress SupportCandy Plugin <= 2.0.0 Arbitrary File Upload Vulnerability
2019-04-24 00:00:00
prion
prion
Unrestricted file upload
2019-04-18 18:29:00
nvd
nvd
CVE-2019-11223
2019-04-18 18:29:00
cvelist
cvelist
CVE-2019-11223
2019-04-18 17:08:18