CVEブラウザに戻る

CVE-2020-36728

MEDIUM

6.5

CVSS Severity Score

EPSS Score0.1700%

EPSS Percentile9.80th

Published2023年6月7日

Last Modified2026年4月8日

Vulnerability Description

The Adning Advertising plugin for WordPress is vulnerable to file deletion via path traversal in versions up to, and including, 1.5.5. This allows unauthenticated attackers to delete arbitrary files which can be used to reset and gain full control of a site.

Affected Platforms (CPE)

📦

Tunasite

Adning Advertising

< 1.5.6

References & Advisories

🔗 https://blog.nintechnet.com/critical-vulnerability-in-adning-advertising-plugin-actively-exploited-in-the-wild/

🔗 https://codecanyon.net/item/wp-pro-advertising-system-all-in-one-ad-manager/269693

🔗 https://www.wordfence.com/blog/2020/07/critical-vulnerabilities-patched-in-adning-advertising-plugin/

🔗 https://www.wordfence.com/threat-intel/vulnerabilities/id/e7506429-7f8a-45b5-b1b0-6fdb39599ee5?source=cve

🔗 https://blog.nintechnet.com/critical-vulnerability-in-adning-advertising-plugin-actively-exploited-in-the-wild/

🔗 https://codecanyon.net/item/wp-pro-advertising-system-all-in-one-ad-manager/269693

🔗 https://www.wordfence.com/blog/2020/07/critical-vulnerabilities-patched-in-adning-advertising-plugin/

🔗 https://www.wordfence.com/threat-intel/vulnerabilities/id/e7506429-7f8a-45b5-b1b0-6fdb39599ee5?source=cve

関連する脆弱性情報

CVE-2020-367059.8

The Adning Advertising plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the _ni...

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc all...