PatchTheCVEplogger vulnerabilities and fixes
Recent CVEs affecting plogger, with upgrade or downgrade steps. 3 tracked.
plogger has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2014-12-29. Highest priority: CVE-2014-2223 (score 55/100).
- CVE-2014-2224 MEDIUM 5.0 UPGRADE Plogger 1.0 RC1 and earlier, when the Lucid theme is used, does not assign new values for certain codes, which
- CVE-2014-2223 HIGH 7.5 UPGRADE Unrestricted file upload vulnerability in plog-admin/plog-upload.php in Plogger 1.0 RC1 and earlier allows rem
- CVE-2012-5289 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Plogger 1.0 RC1 allow remote attackers to execute arbitrary SQL comm
FAQ
How do I fix plogger vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is plogger being exploited right now?
None of the tracked plogger CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which plogger CVE should I patch first?
CVE-2014-2223 currently ranks highest (55/100): Unrestricted file upload vulnerability in plog-admin/plog-upload.php in Plogger 1.0 RC1 and earlier allows rem.