CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-6446

The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict access, which allows remote attackers to upload arbitrary files and execute arbitrary PHP code via a request to utilities/code_generator.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.808

EPSS Ranking 99.1%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2014-6446

Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.10

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.10
Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.3

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.3
Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.4

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.4
Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.4.1

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.4.1
Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.4.2

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.4.2
Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.5

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.5
Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.6

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.6
Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.7

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.7
Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.7.1

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.7.1
Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.7.2

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.7.2
Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.8

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.8
Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.8.1

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.8.1
Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.9

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.9
Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.9.1

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.9.1
Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.9.2

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.9.2
Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.9.3

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.9.3
Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.9.4

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.9.4
Infusionsoft Gravity Forms Project » Infusionsoft Gravity Forms » Version: 1.5.9.5

cpe:2.3:a:infusionsoft_gravity_forms_project:infusionsoft_gravity_forms:1.5.9.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-6446

Products

Pricing

Contact Us