CVE Intelligence

Vulnerabilidades do Sneeit Sneeit Framework

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Sneeit Sneeit Framework: 1 registro(s), com versões afetadas e correções.

CVE-2025-6389 Crítica · 9.8 Exploit público CWE-94 25/11/2025
Sneeit Framework <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback
The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeit_articles_pagination_callback() function. This is due to the function accepting user input and then passing that through call_user_func(). This makes it possible for unauthenticated attackers to execute code on the server which can be leveraged to inject backdoors or, for example, create new administrative user accounts.