Description
The DoLeads Integrator WordPress plugin through 0.65, wp2epub WordPress plugin through 0.65 have been seen to be used to achieve RCE, once they are added adding to a blog, for example using a vulnerability where unclosed extensions from wordpress.org can be installed by unauthorized users.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | DoLeads Integrator | ≤ 0.65 | — |
| — | wp2epub | ≤ 0.65 | — |
References
- https://wpscan.com/vulnerability/dd043e6c-e6c6-4c8d-aab0-5265d28f5cf6/ exploit vdb-entry technical-description