Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbGerard ArallWPVDB-ID:39638389-722D-4ECF-B87C-5BCA2709241B
HistoryMar 09, 2020 - 12:00 a.m.

WPML < 4.3.7 - Authenticated Cross Site Request Forgery leading to Remote Code Execution

2020-03-0900:00:00
Gerard Arall
wpscan.com
18

0.006 Low

EPSS

Percentile

78.2%

JSON

The sitepress-multilingual-cms (WPML) WordPress plugin before version 4.3.7 has CSRF due loose comparison, that leads to remote code execution.

CPENameOperatorVersion
sitepress-multilingual-cmslt4.3.7

Related

patchstack 1
prion 1
cvelist 1
cve 1
nvd 1
patchstack
patchstack
WordPress WPML plugin <= 4.3.6 - Authenticated Cross-Site Request Forgery (CSRF) vulnerability leading to Remote Code Execution (RCE)
2020-03-09 00:00:00
prion
prion
Remote code execution
2020-03-14 14:15:00
cvelist
cvelist
CVE-2020-10568
2020-03-14 13:50:04
cve
cve
CVE-2020-10568
2020-03-14 14:15:11
nvd
nvd
CVE-2020-10568
2020-03-14 14:15:11

0.006 Low

EPSS

Percentile

78.2%

JSON
Related for WPVDB-ID:39638389-722D-4ECF-B87C-5BCA2709241B
patchstack1prion1cvelist1cve1nvd1