Allwebmenus Plugin

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-1011 HIGH POC PATCH This Week

actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitrary PHP code by setting the HTTP_REFERER to a. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

WordPress Privilege Escalation PHP Allwebmenus Plugin

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

7.7%

CVE-2012-1010 HIGH POC This Week

Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a ZIP file containing a. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress PHP File Upload Allwebmenus Plugin

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

8.7%

CVE-2012-1011

EPSS 8% CVSS 7.5

HIGH POC PATCH This Week

WordPress Privilege Escalation PHP +1

NVD Exploit-DB

CVE-2012-1010

EPSS 9% CVSS 7.5

HIGH POC This Week

WordPress PHP File Upload +1

NVD Exploit-DB