PT-2018-16870

CVE-2018-5289

·

Published

2018-01-08

·

Updated

2018-01-19

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions GD Rating System plugin version 2.3
Description The issue concerns a Directory Traversal problem in the wp-admin/admin.php panel, specifically affecting the gd-rating-system-information page. This is related to a parameter in the plugin's administration panel.
Recommendations For GD Rating System plugin version 2.3, consider restricting access to the vulnerable gd-rating-system-information page in the wp-admin/admin.php panel until a patch is available. Avoid using the affected parameter in the administration panel to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾