3 matches found
DEBIAN-CVE-2014-5203
wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data...
7.5CVSS8AI score0.03892EPSS
SaveExploits0References1
CVE-2014-5203
wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data...
7.5CVSS0.03892EPSS
SaveExploits0References4
PT-2014-6342
Name of the Vulnerable Software and Affected Versions WordPress versions 3.9.0 through 3.9.1 Description The issue in WordPress might allow remote attackers to execute arbitrary code via crafted serialized data in the widget implementation. Recommendations For WordPress versions 3.9.0 through...
7.5CVSS0.03892EPSS
SaveExploits0References8
20