A vulnerability was found in InfiniteWP Client Plugin 1.5.1.3/1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to injection. The attack can be launched remotely. Upgrading to version 1.6.1.1 is able to address this issue. It is recommended to upgrade the affected component.
References
| Link | Resource |
|---|---|
| http://seclists.org/fulldisclosure/2017/Jan/72 | Exploit Mailing List Third Party Advisory |
| https://sumofpwn.nl/advisory/2016/infinitewp_client_wordpress_plugin_unauthenticated_php_object_injection_vulnerability.html | Exploit Third Party Advisory |
| https://vuldb.com/?id.96073 | Third Party Advisory |
| http://seclists.org/fulldisclosure/2017/Jan/72 | Exploit Mailing List Third Party Advisory |
| https://sumofpwn.nl/advisory/2016/infinitewp_client_wordpress_plugin_unauthenticated_php_object_injection_vulnerability.html | Exploit Third Party Advisory |
| https://vuldb.com/?id.96073 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:45
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.3 |
| References | () http://seclists.org/fulldisclosure/2017/Jan/72 - Exploit, Mailing List, Third Party Advisory | |
| References | () https://sumofpwn.nl/advisory/2016/infinitewp_client_wordpress_plugin_unauthenticated_php_object_injection_vulnerability.html - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?id.96073 - Third Party Advisory |
29 Jul 2022, 15:42
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:revmakx:infinitewp_client:1.6.0:*:*:*:*:wordpress:*:* cpe:2.3:a:revmakx:infinitewp_client:1.5.1.3:*:*:*:*:wordpress:*:* |
|
| References | (MISC) https://vuldb.com/?id.96073 - Third Party Advisory | |
| References | (MISC) https://sumofpwn.nl/advisory/2016/infinitewp_client_wordpress_plugin_unauthenticated_php_object_injection_vulnerability.html - Exploit, Third Party Advisory | |
| References | (MISC) http://seclists.org/fulldisclosure/2017/Jan/72 - Exploit, Mailing List, Third Party Advisory |
23 Jul 2022, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-07-23 07:15
Updated : 2024-11-21 02:45
NVD link : CVE-2016-15004
Mitre link : CVE-2016-15004
CVE.ORG link : CVE-2016-15004
JSON object : View
Products Affected
revmakx
- infinitewp_client
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')