PT-2023-10167 · WordPress · I Recommend This Plugin

Oskar Adin · Publicado 2023-04-20 · Atualizado 2024-05-17 · CVE-2014-125099

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions I Recommend This Plugin versions up to 3.7.2

Description A critical vulnerability has been found in the I Recommend This Plugin on WordPress, affecting an unknown functionality of the file dot-irecommendthis.php. The manipulation leads to sql injection, and the attack can be launched remotely.

Recommendations For versions up to 3.7.2, upgrade to version 3.7.3 to address this issue.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2014-125099

Produtos afetados

I Recommend This Plugin

Referências · 8

• https://github.com/wp-plugins/i-recommend-this/releases/tag/3.7.3 · Correção
• https://t.me/cibsecurity/62502 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2014-125099 · Nota de Segurança
• https://vuldb.com/?ctiid.226309 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-125099 · Nota
• https://github.com/wp-plugins/i-recommend-this/commit/058b3ef5c7577bf557557904a53ecc8599b13649 · Correção
• https://vuldb.com/?id.226309 · Nota
• https://t.me/cvenotify/49399 · Publicação no Telegram