Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
WordPress Plugin WordPress Framework Possible Backdoor (1.0) - Vulnerability Database

WordPress Plugin WordPress Framework Possible Backdoor (1.0)

Description

WordPress Plugin WordPress Framework contains suspicious code. Attackers can exploit this issue to perform a variety of actions: reset password, delete database, etc. Successful attacks will compromise the affected application and possibly the webserver or computer. WordPress Plugin WordPress Framework version 1.0 is affected.

Remediation

Delete the plugin

References

https://blog.sucuri.net/2019/10/cryptominers-backdoors-found-in-fake-plugins.html

Related Vulnerabilities

Apache 2.x version older than 2.0.43 Medium
Common tags: Missing Update
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor 'key' Parameter Security Bypass (1.1.24) High
Common tags: Missing Update
WordPress Plugin Track That Stat 'data' Parameter Cross-Site Scripting (1.0.8) High
Common tags: Missing Update
WordPress Plugin Subscribe2 Multiple Cross-Site Scripting Vulnerabilities (8.1) High
Common tags: Missing Update
WordPress Plugin SoundCloud Is Gold 'width' Parameter Cross-Site Scripting (2.1) High
Common tags: Missing Update

Severity

High

Classification

CWE-95
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Missing Update