← back
CVE-2018-20985

CVE-2018-20985

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 7.7%
exploitation probability
7.7%top 6% of all CVEs
observed exploitation
nono source reports it
The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec.
Affected products
n/a · n/a