CVE-2023-40606: falha crítica em Kanban Boards for WordPress
WordPress Kanban Boards for WordPress Plugin <= 2.5.21 is vulnerable to Arbitrary Code Execution
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.1epss 0.8%
Improper Control of Generation of Code ('Code Injection') vulnerability in Kanban for WordPress Kanban Boards for WordPress.This issue affects Kanban Boards for WordPress: from n/a through 2.5.21.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Kanban for WordPress · Kanban Boards for WordPressCVEs relacionadas — Kanban Boards for WordPress
No mesmo produto, das mais perigosas para as menos.
CVE-2024-37226MEDIUMWordPress Kanban Boards for WordPress plugin <= 2.5.21 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-34368MEDIUMWordPress Kanban Boards for WordPress Plugin <= 2.5.20 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-23884MEDIUMWordPress Kanban Boards for WordPress Plugin <= 2.5.20 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-31103HIGHWordPress Kanban Boards for WordPress plugin <= 2.5.21 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%