CVE-2019-1010209CWE-434

GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434

published July 23, 2019

CVSS
—
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. The impact is: unauthenticated/unzuthorized Attacker can upload executable file in website. The component is: gourl.php#L5637. The fixed version is: 1.4.14.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02129 · 81.8th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2019-07-23T13:09Z
EPSS history
Timeline
  • 23 JUL 13:09Z
    GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434
    cvelistv5