Beveiligingsadvies

CVE-2020-37169

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-13 14:22:28

Laatst bijgewerkt 2026-05-13 15:33:39

Toegewezen door VulnCheck

CVSS-score 6.8

Status PUBLISHED

Beschrijving

WordPress Plugin ultimate-member 2.1.3 contains a local file inclusion vulnerability that allows authenticated attackers to include arbitrary files by manipulating the pack parameter in class-admin-upgrade.php. Attackers can send POST requests with malicious pack values to include unintended PHP files from the packages directory and execute arbitrary code.

← Alle CVE's bekijken Bekijk op cve.org ↗