CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-17573

The Wp-Insert plugin through 2.4.2 for WordPress allows upload of arbitrary PHP code because of the exposure and configuration of FCKeditor under fckeditor/editor/filemanager/browser/default/browser.html, fckeditor/editor/filemanager/connectors/test.html, and fckeditor/editor/filemanager/connectors/uploadtest.html.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.021

EPSS Ranking 83.2%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2018-17573

Smartlogix » Wp-Insert » Version: 2.1

cpe:2.3:a:smartlogix:wp-insert:2.1
Smartlogix » Wp-Insert » Version: 2.1.1

cpe:2.3:a:smartlogix:wp-insert:2.1.1
Smartlogix » Wp-Insert » Version: 2.1.2

cpe:2.3:a:smartlogix:wp-insert:2.1.2
Smartlogix » Wp-Insert » Version: 2.1.3

cpe:2.3:a:smartlogix:wp-insert:2.1.3
Smartlogix » Wp-Insert » Version: 2.1.4

cpe:2.3:a:smartlogix:wp-insert:2.1.4
Smartlogix » Wp-Insert » Version: 2.1.5

cpe:2.3:a:smartlogix:wp-insert:2.1.5
Smartlogix » Wp-Insert » Version: 2.1.6

cpe:2.3:a:smartlogix:wp-insert:2.1.6
Smartlogix » Wp-Insert » Version: 2.1.7

cpe:2.3:a:smartlogix:wp-insert:2.1.7
Smartlogix » Wp-Insert » Version: 2.1.8

cpe:2.3:a:smartlogix:wp-insert:2.1.8
Smartlogix » Wp-Insert » Version: 2.2

cpe:2.3:a:smartlogix:wp-insert:2.2
Smartlogix » Wp-Insert » Version: 2.3

cpe:2.3:a:smartlogix:wp-insert:2.3
Smartlogix » Wp-Insert » Version: 2.4

cpe:2.3:a:smartlogix:wp-insert:2.4
Smartlogix » Wp-Insert » Version: 2.4.1

cpe:2.3:a:smartlogix:wp-insert:2.4.1
Smartlogix » Wp-Insert » Version: 2.4.2

cpe:2.3:a:smartlogix:wp-insert:2.4.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-17573

Products

Pricing

Contact Us