CVE-2018-16283

CVE-2018-16283

Published 24 Sep 2018 · Updated 05 Aug 2024

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 64%

from disclosure to weaponsame day

Published on NVDSep 24

1st PoCSep 19

The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter.

Affected products

public PoCs found — 3

exploitdbwww.exploit-db.com/exploits/45438unverified githubgithub.com/cved-sources/cve-2018-16283★ 0 cve_referencewww.exploit-db.com/exploits/45438/unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://seclists.org/fulldisclosure/2018/Sep/32 https://github.com/springjk/wordpress-wechat-broadcast/issues/14 https://wpvulndb.com/vulnerabilities/9132 https://www.exploit-db.com/exploits/45438/