Vulnerability Bulletins |
High Severity CSRF to RCE Vulnerability Patched in Code Snippets Plugin |
|
| Affected software | Wordpress |
|
https://www.wordfence.com/blog/2020/01/high-severity-csrf-to-rce-vulnerability-patched-in-code-snippets-plugin/ Description: Cross-Site Request Forgery to Remote Code ExecutionAffected Plugin: Code SnippetsAffected Versions: <= 2.13.3CVE ID: CVE-2020-8417CVSS Score: 8.8 (High)CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HPatched Version: 2.14.0 On January 23rd, our Threat Intelligence team discovered a vulnerability in Code Snippets, a WordPress plugin installed on over 200,000 More info: https://www.wordfence.com/blog/2020/01/high-severity-csrf-to-rce-vulnerability-patched-in-code-snippets-plugin/ |
|