Situation
A security issue was found in the handling of database-creation commands in WP Toolkit.
Affected Product Versions
| Product | Affected Versions | Patched Versions |
|---|---|---|
| WP Toolkit | 6.11.2-10794 and older | 6.11.3 or later |
Impact
Successful exploitation can lead to an authenticated cPanel user being able to perform database modifications in other accounts.
Call to action
You an update WP Toolkit to the patched version using the following command:
# # bash <(curl https://wp-toolkit.plesk.com/cPanel/installer.sh || wget -O - https://wp-toolkit.plesk.com/cPanel/installer.sh) --version 6.11.3
Acknowledgements
We would like to thank Ali Mustafa (rz1027) for responsibly disclosing this vulnerability.
Comments
0 comments
Article is closed for comments.