Approved changes feed: RSS · Atom

cpe:2.3:a:automattic:vaultpress:1.8.4:*:*:*:*:wordpress:*:*

part: a version: 1.8.4 update: *

VendorAutomattic (1dc39c9b-4ddb-5af6-acf4-410b436129a9)
ProductVaultpress (c4f6c5a5-d396-5241-8cb9-8e72d5a1fb81)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/automattic/jetpack purl2cpe 2026-06-01 10:14:42.563440
pkg:github/wp-plugins/vaultpress purl2cpe 2026-06-01 10:14:42.563441

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-20086 vulnerable 2026-06-03 14:37:06.256020 VaultPress Plugin code injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in VaultPress Plugin 1.8.4. This affects an unknown part. The manipulation leads to code injection. It is possible to initiate the attack remotely.
Published: 2022-06-23T04:20:24.000Z
Updated: 2025-04-15T14:15:00.560Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.