Description
This HTTP Headers WordPress plugin before 1.18.11 allows arbitrary data to be written to arbitrary files, leading to a Remote Code Execution vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | HTTP Headers | < 1.18.11 | 1.18.11 |
References
- https://wpscan.com/vulnerability/e0cc6740-866a-4a81-a93d-ff486b79b7f7 exploit vdb-entry technical-description