← WordPress Vulnerabilities
WordPress security by component

Fusionpbx

Fusionpbx is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Oct 21, 2019; the highest CVE/CNA score is 8.8.

Plugin slug: fusionpbx

CVE-2019-16964: Fusionpbx: A security weakness

Fusionpbx is affected by a security weakness. Exploitation requires an authenticated WordPress account. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedOct 21, 2019
Safe version guidanceSee mitigation notes
Safe version
Oct 21, 2019 CVE-2019-16964
Fusionpbx: A security weakness
Fusionpbx is affected by a security weakness. Exploitation requires an authenticated WordPress account. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE8.8
NVD8.8
Oct 21, 2019 CVE-2019-16980
Fusionpbx: SQL injection
Fusionpbx is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE8.8
NVD8.8