Wp2fac vulnerabilities
We track 1 vulnerability in Wp2fac products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 15, 2025.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest Wp2fac vulnerabilities
- 9.3 Critical severity
Wp2Fac: Improper Neutralization of Special Elements used in an OS Command
Wp2Fac 1.0 contains an OS command injection vulnerability in the send.php endpoint that allows remote attackers to execute arbitrary system commands. Attackers can inject shell commands through the 'numara' parameter by appending shell commands with '&' operat