EUVD-2018-21876

Redaxo CMS Mediapool Addon 5.5.1 and older contains an arbitrary file upload vulnerability that allows authenticated users to bypass file extension blacklist restrictions. Attackers with editor accounts can upload executable files by using obfuscated extensions like php71 or php53 to evade the...

Linux Distros Unpatched Vulnerability : CVE-2020-28034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress before 5.5.2 allows XSS associated with global variables. CVE-2020-28034 Note that Nessus relies on the presence of the package as reported by the...

PT-2020-5799 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.5.2 Description: The issue is related to a lack of privilege management mechanism in the WordPress content management system. Exploitation of this issue can allow a remote attacker to gain access to confidential...