Lucene search
Veracode Vulnerability DatabaseVERACODE:7903HistoryNov 30, 2018 - 4:51 a.m.
Remote Code Execution (RCE)
2018-11-3004:51:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
EPSS
0.015
Percentile
87.2%
yoast/wordpress-seo is vulnerable to remote code execution. An SEO Manager is able to execute arbitrary OS commands via a ZIP import through a race condition vulnerability in unzip_file in admin/import/class-import-settings.php.
Related
cvelist
cvelist
CVE-2018-19370
2018-11-28 22:00:00
wpvulndb
wpvulndb
Yoast SEO <= 9.1 - Authenticated Race Condition
2018-11-20 00:00:00
cve
cve
CVE-2018-19370
2018-11-28 22:29:00
prion
prion
Race condition
2018-11-28 22:29:00
openvas
openvas
WordPress Yoast SEO Plugin < 9.2.0 Race Condition Vulnerability
2019-02-18 00:00:00
nvd
nvd
CVE-2018-19370
2018-11-28 22:29:00