WP Query Console <= 1.0 - Unauthenticated Remote Code Execution
criticalThe WP Query Console plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0. This makes it possible for unauthenticated attackers to execute code on the server.
- CVSS:
- 9.8
- Affected:
- up to 1.0
- Fix:
- No patched version reported
- Disclosed:
- Oct 25, 2024