CVE-2015-5227 WordPress Landing Pages <= 1.9.0 - Unauthenticated Remote Command Execution
HighCVSS 8.8
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Landing Pages plugin before 1.9.2 for WordPress allows remote attackers to execute arbitrary code via the url parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress landing-pages(WordPress) | < 1.9.2 | 1.9.2 |
| inboundnow wordpress landing pages | <= 1.9.1 | No fix listed |
References
- Wordfence Intelligence third-party-advisory
- www.cve.org
- wordpress.org release-notes third-party-advisory
- wpvulndb.com third-party-advisory