TI-2017-13756 CVE-2017-18583 · GHSA-f35f-fpgm-j43c
The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection.
Priority MEDIUM 46
The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection.
Post Pay Counter Project
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Post Pay Counter Project records in CISA KEVNo Post Pay Counter Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Post Pay Counter · all components
TI-2017-13757 CVE-2017-18584 · GHSA-vfpg-2jhv-7r6p
The post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update-settinga action.
Priority LOW 36
The post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update-settinga action.