Remote code execution

2024-01-1709:15:00

PRIOn knowledge base

www.prio-n.com

remote code execution

social warfare

wordpress

vulnerability

server attack

8.2 High

AI Score

Confidence

Low

0.017 Low

EPSS

Percentile

87.9%

JSON

The Social Warfare plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.5.2 via the ‘swp_url’ parameter. This allows attackers to execute code on the server.

CPENameOperatorVersion
social_warfarelt3.5.3

CPE	Name	Operator	Version
	social_warfare	lt	3.5.3

References

packetstormsecurity.com/files/163680/WordPress-Social-Warfare-3.5.2-Remote-Code-Execution.html

www.wordfence.com/threat-intel/vulnerabilities/id/98cf2a10-cc53-4479-87d1-71489f6a8c51?source=cve