Skip to content
OpenAdvisories

Product · themeisle

Woody Code Snippets

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2017-20251 Public exploit

    WordPress Insert PHP Plugin < 3.3.1 PHP Code Injection via REST API

    WordPress Insert PHP plugin versions before 3.3.1 contain a PHP code injection vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by injecting malicious shortcodes through the WordPress REST API. Attackers can send POST requests…