CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Improper Control of Generation of Code ('Code Injection') vulnerability in Deepak anand WP Dummy Content Generator wp-dummy-content-generator.This issue affects WP Dummy Content Generator: from n/a through <= 3.2.1.
Explanation of Vulnerability in Simple Terms
WP Dummy Content Generator versions 3.2.1 and earlier contain a code injection vulnerability that allows unauthenticated attackers to run arbitrary PHP code on affected WordPress sites. The vulnerability requires no user interaction and can be exploited over the network. An attacker can gain complete control of the site, including reading sensitive data, modifying content, and disrupting service.
What an attacker can do
Run arbitrary PHP code on the site and take complete control without authentication.
Potential impact on your site
Complete site compromise: attackers can steal data, modify content, install malware, or take the site offline.
Conditions required to exploit
Network access to the WordPress site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
