COOEY // HUBcompliance · community · intelligence

FAIL › dossier

WordPress vendor

3
failure events
0
zero-days
2
RCEs
3
on KEV
0
critical
65
worst shame

Dossier not yet built — the RAG curator builds one for players with ≥2 failure events (factory/dossier.py). The failure history and sentiment below are live.

Failure history 3 events

DateEventSevFlagsShameSummary
2021-11-03 CVE-2019-9978 high ⚡RCE ⌖KEV 65 WordPress Social Warfare plugin contains a cross-site scripting (XSS) vulnerability that allows for remote code execution. This vulnerability affects Social Warfare and Social Warfare Pro.
2021-11-03 CVE-2020-25213 high ⚡RCE ⌖KEV 65 WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code and upload malicious files on a target site.
2021-11-03 CVE-2020-11738 high ⌖KEV 50 WordPress Snap Creek Duplicator plugin contains a file download vulnerability when an administrator creates a new copy of their site that allows an attacker to download the generated files from their Wordpress dashboard. This vulnerability affects Duplicator and Dulplicator Pro.