Description
WordPress Plugin to Manage/Design WordPress Blog-WP Blog Manager Lite [only if downloaded via the vendor website] contains suspicious code. Attackers can exploit this issue to perform a variety of actions. Successful attacks will compromise the affected application and possibly the webserver or computer. WordPress Plugin to Manage/Design WordPress Blog-WP Blog Manager Lite version 1.1.0 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.1.2 or latest
References
Related Vulnerabilities
Microsoft SQL Server Other Vulnerability (CVE-2000-0402)
WordPress Plugin WP No External Links Cross-Site Scripting (3.5.18)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-16738)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1044)
WordPress Plugin Slimstat Analytics Multiple Vulnerabilities (5.0.9)