Security Advisory

CVE-2021-44223

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-11-25 14:51:19

Last updated 2024-08-04 04:17:24

Assigner mitre

State PUBLISHED

Description

WordPress before 5.8 lacks support for the Update URI plugin header. This makes it easier for remote attackers to execute arbitrary code via a supply-chain attack against WordPress installations that use any plugin for which the slug satisfies the naming constraints of the WordPress.org Plugin Directory but is not yet present in that directory.

← Browse all CVEs View on cve.org ↗