Skip to content

Vendor

wp2fac vulnerabilities

1 published CVE affecting wp2fac, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of wp2fac alerts

Products

Latest wp2fac CVEs

Newest publication first

  1. CVE-2023-53872 Wp2Fac 1.0 OS Command Injection via send.php Endpoint

    Published
    CriticalCVSS 9.3

    Wp2Fac 1.0 contains an OS command injection vulnerability in the send.php endpoint that allows remote attackers to execute arbitrary system commands. Attackers can inject shell commands through the 'numara' parameter by appending shell commands with '&' operators to execute malic...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.