CVE-2019-1010209

ALTO 7.5CVE-2019-1010209 · Published 23/07/2019 · updated 17/06/2026

In breve

CVE-2019-1010209 è una vulnerabilità ALTO (CVSS 7.5) che riguarda gourl (gorul).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.1%, superiore al 82.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
gourl gorul	`≤ 1.4.13`	No fix yet

Description

GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. The impact is: unauthenticated/unzuthorized Attacker can upload executable file in website. The component is: gourl.php#L5637. The fixed version is: 1.4.14.

References

gist.github.com/pouyadarabi/467d3167551fb0712d3264c72db092af · Patch
cryptoapi/Bitcoin-Wordpress-Plugin · Patch
youtube.com/watch · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free