CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

NVD•added 2018/10/18 6:29 a.m.•17 views

CVE-2018-18461

The Arigato Autoresponder and Newsletter aka bft-autoresponder v2.5.1.7 plugin for WordPress allows remote attackers to execute arbitrary code via PHP code in attachments data to models/attachment.php...

9.8CVSS9.8AI score0.04184EPSS

SaveExploits1References2

OSV•added 2018/10/18 6:29 a.m.•6 views

CVE-2018-18461

9.8CVSS6.1AI score0.04184EPSS

SaveExploits1References2

CVE•added 2018/10/18 6:0 a.m.•54 views

CVE-2018-18461

The connected CNVD/NVD entries confirm a concrete vulnerability in the WordPress plugin Arigato Autoresponder and Newsletter (aka bft-autoresponder), version 2.5.1.7. The flaw resides in the models/attachment.php handler and allows remote attackers to execute arbitrary PHP code by supplying PHP c...

9.8CVSS9.8AI score0.04184EPSS

SaveExploits1References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by