Approved changes feed: RSS · Atom

cpe:2.3:a:accessally,_inc.:accessally:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAccessally, Inc. (906ce8d1-5c47-522f-a7d6-80b10029a3d2)
ProductAccessally (011276d5-c136-51bd-93c6-a4be34f96a02)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36875 vulnerable 2026-06-03 14:42:40.165555 AccessAlly < 3.3.2 Unauthenticated Arbitrary PHP Code Execution
AccessAlly WordPress plugin versions prior to 3.3.2 contain an unauthenticated arbitrary PHP code execution vulnerability in the Login Widget. The plugin processes the login_error parameter as PHP code, allowing an attacker to supply and execute arbitrary PHP in the context of the WordPress web server process, resulting in remote code execution.
Published: 2026-01-09T16:41:06.883Z
Updated: 2026-03-05T01:26:53.997Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.