CVE-2014-125102
Last modified
CVE-2014-125102 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A vulnerability classified as problematic was found in Bestwebsoft Relevant Plugin up to 1.0.7 on WordPress. Affected by this vulnerability is an unknown functionality of the component Thumbnail Handler. EPSS estimates a 0.62% chance of exploitation in the next 30 days.
Description
A vulnerability classified as problematic was found in Bestwebsoft Relevant Plugin up to 1.0.7 on WordPress. Affected by this vulnerability is an unknown functionality of the component Thumbnail Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 1.0.8 is able to address this issue. The identifier of the patch is 860d1891025548cf0f5f97364c1f51a888f523c3. It is recommended to upgrade the affected component. The identifier VDB-230113 was assigned to this vulnerability.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Bestwebsoft | Relevant | < 1.0.8 |
References
- https://vuldb.com/?ctiid.230113Permissions Required
- https://vuldb.com/?id.230113Permissions Required
- https://vuldb.com/?ctiid.230113Permissions Required
- https://vuldb.com/?id.230113Permissions Required
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-125102?
How severe is CVE-2014-125102?
How do I fix CVE-2014-125102?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-125097A vulnerability, which was classified as problematic, was fo…6.1
- CVE-2014-125098A vulnerability was found in Dart http_server up to 0.9.5 an…6.1
- CVE-2014-125099A vulnerability has been found in I Recommend This Plugin up…9.8
- CVE-2014-1251Buffer overflow in Apple QuickTime before 7.7.5 allows remot…
- CVE-2014-125100A vulnerability classified as problematic was found in BestW…6.1
- CVE-2014-125101A vulnerability classified as critical has been found in Por…9.8
- CVE-2014-125103A vulnerability was found in BestWebSoft Twitter Plugin up t…6.1
- CVE-2014-125104A vulnerability was found in VaultPress Plugin up to 1.6.0 o…9.8
- CVE-2014-125105A vulnerability was found in Broken Link Checker Plugin up t…6.1
- CVE-2014-125106Nanopb before 0.3.1 allows size_t overflows in pb_dec_bytes …9.8
- CVE-2014-125107A vulnerability was found in Corveda PHPSandbox 1.3.4 and cl…5.3
- CVE-2014-125108A vulnerability was found in w3c online-spellchecker-py up t…6.1
Are you affected by CVE-2014-125102?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
