SB2020042329 - Backdoor in M-Shield plugin for WordPress
Published: April 23, 2020
Security Bulletin ID
SB2020042329
Severity
High
Patch available
NO
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Hidden functionality (CVE-ID: N/A)
The vulnerability allows a remote attacker to compromise vulnerable system
The vulnerability exists due to hidden functionality (backdoor) is present in fake WordPress plugin called M-Shield. A remote attacker can use this functionality to gain full access to the application and compromise the affected system.
Remediation
Cybersecurity Help is not aware of any official remediation provided by the vendor.