SB2017091506 - Backdoor in Display Widgets plugin for Wordpress

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2017091506

SB2017091506 - Backdoor in Display Widgets plugin for Wordpress

Published: September 15, 2017

Security Bulletin ID SB2017091506
CSH Severity
High
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Backdoor (CVE-ID: N/A)

CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor

CVSSv4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to disclose important data on the target system.

The weakness exists due to presence of backdoor in Display Widgets Plugin for WordPress.

Remediation

Install update from vendor's website.

References