PRODUCT PROFILE

cherry-plugin

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

高危2023/10/20

WordPress Cherry < 1.2.7 - Unauthenticated Arbitrary File Upload and Download

WordPress plugin Cherry < 1.2.7 has a vulnerability which enables an attacker to upload files directly to the server. This could result in attacker uploading backdoor shell scripts or downloading the wp-config.php file.

cherry-pluginPoC 已收录RCE

CVSS8.6

高危2017/06/08

Cherry Plugin < 1.2.7 - Arbitrary File Retrieval and File Upload

WordPress plugin Cherry < 1.2.7 contains an unauthenticated file upload and download vulnerability, allowing attackers to upload and download arbitrary files. This could result in attacker uploading backdoor shell scripts or downloading the wp-config.php file.

cherry-pluginPoC 已收录RCE

CVSS8.6