plugin

Cwicly Vulnerabilities

3 known security issues reported for the Cwicly WordPress plugin. Most recent disclosed Apr 3, 2024.

1 high

Running Cwicly on your site? Check whether your installed version is affected.

Scan your site free

Cwicly [cwicly] < 1.4.0.3

unknown

[en] Improper Control of Generation of Code ('Code Injection') vulnerability in Cwicly Builder, SL. Cwicly allows Code Injection.This issue affects Cwicly: from n/a through 1.4.0.2.

Affected:
up to 1.4.0.3
Fixed in:
1.4.0.3
Disclosed:
Apr 3, 2024

CVE-2024-24707 on NVD →

Cwicly <= 1.4.0.2 - Authenticated (Contributor+) Remote Code Execution

high

The Cwicly plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.0.2. This makes it possible for authenticated attackers, with contributor-level access and above, to execute code on the server.

CVSS:
8.8
Affected:
up to 1.4.0.2
Fixed in:
1.4.0.3
Disclosed:
Feb 14, 2024

CVE-2024-24707 on NVD →

Cwicly [cwicly] < 1.4.0.3

unknown

Update the WordPress Cwicly plugin to the latest available version (at least 1.4.0.3). Snicco discovered and reported this Remote Code Execution (RCE) vulnerability in WordPress Cwicly Plugin. This could allow a malicious actor to execute commands on the target website. This can be used to gain backdoor access to then...

Affected:
up to 1.4.0.3
Fixed in:
1.4.0.3

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database