Dukapress

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-1000011 CRITICAL POC Act Now

Blind SQL Injection in wordpress plugin dukapress v2.5.9. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SQLi Dukapress

NVD

CVSS 3.0

9.8

EPSS

6.0%

CVE-2014-8799 MEDIUM POC THREAT This Month

Directory traversal vulnerability in the dp_img_resize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 91.1%.

Path Traversal WordPress PHP Dukapress

NVD Exploit-DB

CVSS 2.0

5.0

EPSS

91.1%

Threat

5.2

CVE-2015-1000011

EPSS 6% CVSS 9.8

CRITICAL POC Act Now

WordPress SQLi Dukapress

NVD

CVE-2014-8799

EPSS 91% 5.2 CVSS 5.0

MEDIUM POC THREAT This Month

Path Traversal WordPress PHP +1

NVD Exploit-DB