CVE-2021-44223
Published: 25 November 2021
Summary
CVE-2021-44223 is a high-severity an unspecified weakness vulnerability in Wordpress Wordpress. Its CVSS base score is 8.1 (High).
Operationally, ranked in the top 3.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-31072
Vulnerability details
WordPress before 5.8 lacks support for the Update URI plugin header. This makes it easier for remote attackers to execute arbitrary code via a supply-chain attack against WordPress installations that use any plugin for which the slug satisfies the naming…
more
constraints of the WordPress.org Plugin Directory but is not yet present in that directory.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.