CYBERHAWK / CVE / CVE-2017-20251
CVE-2017-20251
CRITICAL
CVSS 9.8
other
The flaw
WordPress Insert PHP plugin versions before 3.3.1 contain a PHP code injection vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by injecting malicious shortcodes through the WordPress REST API. Attackers can
What to do
Review advisory and patch per vendor guidance.