CVE-2017-20086CWE-94

VaultPress Plugin code injection

Medium · published June 23, 2022

CVSS v3.1
6.3
EPSS
1%
Percentile
64.0
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as critical, was found in VaultPress Plugin 1.8.4. This affects an unknown part. The manipulation leads to code injection. It is possible to initiate the attack remotely.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01058 · 64.0th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2022-06-23T04:20Z
EPSS history
Timeline
  • 23 JUN 04:20Z
    VaultPress Plugin code injection
    cvelistv5