PatchTheCVEwebarx vulnerabilities and fixes
Recent CVEs affecting webarx, with upgrade or downgrade steps. 2 tracked.
webarx has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-10-06. Highest priority: CVE-2019-17214 (score 56/100).
- CVE-2019-17214 HIGH 7.5 DOWNGRADE The WebARX plugin 1.3.0 for WordPress allows firewall bypass by appending &cc=1 to a URI.
- CVE-2019-17213 MEDIUM 6.1 DOWNGRADE The WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP h
FAQ
How do I fix webarx vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is webarx being exploited right now?
None of the tracked webarx CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which webarx CVE should I patch first?
CVE-2019-17214 currently ranks highest (56/100): The WebARX plugin 1.3.0 for WordPress allows firewall bypass by appending &cc=1 to a URI..