1 matches found
WordPress PHPMailer < 5.2.18 - Remote Code Execution
WordPress PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " backslash double quote in a crafted Sender property in isMail transport. id: CVE-2016-10033 info: name: WordPress PHPMailer 5.2.18 - Remote...
9.8CVSS8AI score0.99714EPSS
SaveExploits59References5
20