CVE-2024-56278: WordPress WP Ultimate Exporter plugin <= 2.9.1 - Remote Code Execution (RCE) vulnerability
9.1
CVSS
Description
Improper Control of Generation of Code ('Code Injection') vulnerability in Smackcoders WP Ultimate Exporter allows PHP Remote File Inclusion.This issue affects WP Ultimate Exporter: from n/a through 2.9.1.
Classification
CVE ID: CVE-2024-56278
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.1
Affected Products
Vendor: Smackcoders
Product: WP Ultimate Exporter
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.49% (scored less or equal to compared to others)
EPSS Date: 2025-02-05 (when was this score calculated)