Security for everyone

CVE-2017-17059 Scanner

Detects 'Cross-Site Scripting (XSS)' vulnerability in amtyThumb plugin for WordPress affects v. 8.1.3.

SCAN NOW

Short Info


Level

Medium

Single Scan

Single Scan

Can be used by

Asset Owner

Estimated Time

10 sec

Scan only one

Url

Source

-

The amtyThumb plugin for WordPress is a tool used to display featured images in a widget format on a website's homepage. The plugin allows website developers to customize the display of their images with various sizes, labels, and other features. With the amtyThumb plugin, users can create a sleek and organized layout for their website's featured images.

However, the amtyThumb plugin has been found to have a major vulnerability: CVE-2017-17059. This vulnerability exists in the amty-thumb-recent-post version 8.1.3 plugin for WordPress. The vulnerability allows an attacker to inject malicious code into the plugin through a query string placed in the amtyThumbPostsAdminPg.php file.

The exploitation of this vulnerability could lead to the complete takeover of a website. Attackers may use the vulnerability to execute code remotely and potentially access sensitive information on a website, including user data. This vulnerability is particularly dangerous, as it can occur even if the attacker does not have any user credentials.

Thanks to the pro features of the securityforeveryone.com platform, website owners and developers can easily and quickly learn about vulnerabilities in their digital assets. By utilizing the platform's services, website owners can protect their websites from both known and unknown vulnerabilities. Overall, website security is critical, and the potential risks associated with a vulnerable plugin should never be overlooked.

 

REFERENCES

cyber security services for everyone one. Free security tools, continuous vulnerability scanning and many more.
Try it yourself,
control security posture