10
CVE-2016-20010
- EPSS 3.7%
- Veröffentlicht 05.05.2021 14:15:07
- Zuletzt bearbeitet 21.11.2024 02:47:32
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginEWWW Image Optimizer <= 2.8.4 - Remote Code Execution
EWWW Image Optimizer before 2.8.5 allows remote command execution because it relies on a protection mechanism involving boolval, which is unavailable before PHP 5.5.
Mögliche Gegenmaßnahme
EWWW Image Optimizer: Update to version 2.8.5, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ewww ≫ Image Optimizer SwPlatformwordpress Version < 2.8.5
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt
EWWW Image Optimizer
Version
*-2.8.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.7% | 0.883 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 3.9 | 6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
https://plugins.trac.wordpress.org/browser/ewww-image-optimizer/trunk/changelog.txt
https://www.wordfence.com/blog/2016/06/vulnerability-ewww-image-optimizer/
https://www.wordfence.com/threat-intel/vulnerabilities/id/7ffac29d-d1cc-4d5d-aff8-0cb639a1e3d7