Boletines de Vulnerabilidades

Zero-Day Vulnerability in ThemeREX Addons Plugin Exploited in the Wild


Información sobre el sistema

   
Software afectado Wordpress

Descripción

https://www.wordfence.com/blog/2020/02/zero-day-vulnerability-in-themerex-addons-plugin-exploited-in-the-wild/ Description: Remote Code ExecutionAffected Plugin: ThemeREX AddonsAffected Versions: Versions greater than 1.6.50CVSS Score: 9.8 (Critical)CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HPatched Version: Currently No Patch. Today, February 18th, our Threat Intelligence team was notified of a vulnerability present in ThemeREX Addons, a WordPress plugin installed on an estimated

More info:

https://www.wordfence.com/blog/2020/02/zero-day-vulnerability-in-themerex-addons-plugin-exploited-in-the-wild/

Identificadores estándar

Propiedad Valor
CVE

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2020-02-20

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT