Skip to content
OpenAdvisories

Vendor

is-human WordPress Plugin

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.3

    WordPress Plugin is-human <= v1.4.2 Eval Injection RCE

    The WordPress plugin is-human <= v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameter is set to 'log-reset'. The root cause is unsafe use of eval() on user-controlle…