Description

WordPress Plugin WPtouch is prone to a backdoor vulnerability. Attackers can exploit this issue to execute arbitrary commands in the context of the application. Successful attacks will compromise the affected application and possibly the webserver or computer.

Remediation

Install version 1.9.29 or latest

References

http://wordpress.org/news/2011/06/passwords-reset/

http://secunia.com/advisories/45005/

Related Vulnerabilities

WordPress Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Vulnerability (CVE-2017-5493)

WordPress Plugin Add Link to Facebook Multiple Cross-Site Scripting Vulnerabilities (1.215)

WordPress Plugin Advanced Access Manager Security Bypass (3.2.1)

WordPress Plugin NextGEN Gallery-WordPress Gallery Privilege Escalation (3.2.2)

WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.6)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update CWE-95