CVE-2012-10017

HIGH 8.8CVE-2012-10017 · Published 26/12/2023 · updated 16/06/2026

In short

CVE-2012-10017 is a HIGH (CVSS 8.8) vulnerability affecting portfolio (bestwebsoft).
Chance of exploitation in the next 30 days (EPSS): 0.35%, higher than 28.9% of all vulnerabilities.
Fix: update to 2.06 or later.

Package	Affected versions	Patched versions
portfolio bestwebsoft	`< 2.06`	`2.06`

Description

A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.04 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 2.06 is able to address this issue. The patch is named 68af950330c3202a706f0ae9bbb52ceaa17dda9d. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-248955.

References

wp-plugins/portfolio commit 68af950 · Patch
vuldb.com · Permissions Required
vuldb.com · Permissions Required

More vulnerabilities in portfolio

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free