Lucene search
PRIOn knowledge basePRION:CVE-2020-10568HistoryMar 14, 2020 - 2:15 p.m.
Remote code execution
2020-03-1414:15:00
PRIOn knowledge base
www.prio-n.com
6
The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This leads to remote code execution in includes/class-wp-installer.php via a series of requests that leverage unintended comparisons of integers to strings.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sitepress-multilingual-cms | eq | 4.3.7 b.1 | |
| sitepress-multilingual-cms | lt | 4.3.7 |
Related
cve
cve
CVE-2020-10568
2020-03-14 14:15:11
patchstack
patchstack
cvelist
cvelist
CVE-2020-10568
2020-03-14 13:50:04
wpvulndb
wpvulndb
nvd
nvd
CVE-2020-10568
2020-03-14 14:15:11