CVE-2025-3776

CVE-2025-3776 - 「Verification SMS with TargetSMS」プラグインにおけるリモートコード実行 = 1.5 プラグイン情報 プラグイン名: Verification SMS with TargetSMS 脆弱性のあるバージョン: = 1.5 CVE ID: CVE-2025-3776 タイプ: リモートコード実行 RCE OWASP分類: A1: インジェクション CVSS深刻度: 10.0（重大） 必要な権限: 未認証 公開日: 2025年4月23日 根本原因: プログラミングミス...

CVE-2025-3776

The Verification SMS with TargetSMS plugin for WordPress is vulnerable to limited Remote Code Execution in all versions up to, and including, 1.5 via the 'targetvrajaxhandler' function. This is due to a lack of validation on the type of function that can be called. This makes it possible for...

CVE-2025-3776

The Verification SMS with TargetSMS plugin for WordPress is vulnerable to limited Remote Code Execution in all versions up to, and including, 1.5 via the 'targetvrajaxhandler' function. This is due to a lack of validation on the type of function that can be called. This makes it possible for...

WordPress Verification SMS with TargetSMS plugin <= 1.5 - Unauthenticated Limited Remote Code Execution vulnerability

Unauthenticated Limited Remote Code Execution vulnerability discovered by Cheng Liu in WordPress Plugin Verification SMS with TargetSMS versions = 1.5...