CVE-2017-20086 – VaultPress Plugin code injection

https://notcve.org/view.php?id=CVE-2017-20086

A vulnerability, which was classified as critical, was found in VaultPress Plugin 1.8.4. This affects an unknown part. The manipulation leads to code injection. It is possible to initiate the attack remotely. Se ha encontrado una vulnerabilidad, clasificada como crítica, en el plugin VaultPress versión 1.8.4. • http://seclists.org/fulldisclosure/2017/Feb/95 https://vuldb.com/?id.97383 • CWE-94: Improper Control of Generation of Code ('Code Injection') •