Threat Entry Updated 2024-11-21

CVE-2023-1208 - Http Headers Plugin

This HTTP Headers WordPress plugin before 1.18.11 allows arbitrary data to be written to arbitrary files, leading to a Remote Code Execution vulnerability.

PLUGIN Http Headers

CVE-2023-1208

HIGH CVSS 7.2 2023-07-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-01-24

CVE-2023-1207 - Http Headers Plugin

This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server, leading to an SQL Injection vulnerability.

PLUGIN Http Headers

CVE-2023-1207

HIGH CVSS 7.2 2023-05-15

Risk Score

Open Full Technical Breakdown