CVE-2016-20010

CVE-2016-20010

EPSS 3.7%

EWWW Image Optimizer before 2.8.5 allows remote command execution because it relies on a protection mechanism involving boolval, which is unavailable before PHP 5.5.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://plugins.trac.wordpress.org/browser/ewww-image-optimizer/trunk/changelog.txt https://www.wordfence.com/blog/2016/06/vulnerability-ewww-image-optimizer/