Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can use WordPress Gwolle Guestbook, in order to run
code.

Impacted products: WordPress Plugins not comprehensive.

Severity: 2/4.

Creation date: 14/10/2015.

DESCRIPTION OF THE VULNERABILITY

The Gwolle Guestbook plugin can be installed on WordPress.

However, an attacker can inject a file containing PHP code.

An attacker can therefore use WordPress Gwolle Guestbook, in order
to run code.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/WordPress-Gwolle-Guestbook-code-execution-18096