Allwebmenus Plugin

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-1011 Feb 07, 21:55 HIGH POC PATCH This Week

actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitrary PHP code by setting the HTTP_REFERER to a. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP WordPress Privilege Escalation Allwebmenus Plugin Likno

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

7.7%

CVE-2012-1010 Feb 07, 21:55 HIGH POC This Week

Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a ZIP file containing a. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress File Upload Allwebmenus Plugin Likno

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

8.7%

CVE-2012-1011

EPSS 8% CVSS 7.5

HIGH POC PATCH This Week

PHP WordPress Privilege Escalation +2

NVD Exploit-DB

CVE-2012-1010

EPSS 9% CVSS 7.5

HIGH POC This Week

PHP WordPress File Upload +2

NVD Exploit-DB