7.5

CVE-2016-10956

Exploit

Mail Masta <= 1.0 - Local File Inclusion

The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.
Mögliche Gegenmaßnahme
Mail Masta: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mail-masta Project ≫ Mail-masta Version1.0 SwPlatformwordpress
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Mail Masta
Version *-1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 10.58% 0.952
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://cxsecurity.com/issue/WLB-2016080220
Third Party Advisory
Exploit
https://wordpress.org/plugins/mail-masta/#developers
Product
https://wpvulndb.com/vulnerabilities/8609
Third Party Advisory
Exploit
https://www.wordfence.com/threat-intel/vulnerabilities/id/9d4bbf48-6525-4569-98a6-412f2bfe7628
Third Party Advisory