CVE-2016-20010

CVE-2016-20010

EPSS 3.7%

EWWW Image Optimizer before 2.8.5 allows remote command execution because it relies on a protection mechanism involving boolval, which is unavailable before PHP 5.5.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://plugins.trac.wordpress.org/browser/ewww-image-optimizer/trunk/changelog.txt https://www.wordfence.com/blog/2016/06/vulnerability-ewww-image-optimizer/