PT-2007-3808 · WordPress · Wp-Table
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
wp-Table plugin for WordPress versions 1.43 and earlier
Description
The issue allows remote attackers to execute arbitrary PHP code via a URL in the
wpPATH parameter when register globals is enabled.Recommendations
For wp-Table plugin for WordPress versions 1.43 and earlier, consider disabling the
register globals setting to prevent exploitation until a patch is available.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Wp-Table