cleantalk
Vulnerabilities and Security Researches

GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership, CVE-2019-1010209

CVE, Research URL

CVE-2019-1010209

Published on
Jul 23, 2019
Research Description
GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. The impact is: unauthenticated/unzuthorized Attacker can upload executable file in website. The component is: gourl.php#L5637. The fixed version is: 1.4.14.
Affected versions
Min -, max 1.4.14.
Status
vulnerable