Skip to content
OpenAdvisories
Unscored CVE-2019-1010209 EUVD-2019-1951GHSA-w8m2-8wp2-7vvf

GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. The impact is: unauthenticated/unzuthorized Attacker can upload…

Published Jul 23, 2019 · Updated Aug 5, 2024 · Assigned by dwf

Vendor: GoUrl.io Product: GoURL Wordpress Plugin Category: Web / CMS

Description

GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. The impact is: unauthenticated/unzuthorized Attacker can upload executable file in website. The component is: gourl.php#L5637. The fixed version is: 1.4.14.

Affected products

VendorProductAffectedFixed
GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier [fixed: 1.4.14] —

References