Global DNS Code Injection Vulnerability Allowing Remote Code Execution

Vulnerability

A code injection vulnerability has been identified in the Global DNS plugin, versions through 3.1.0. This vulnerability allows for remote code inclusion, where an attacker can execute arbitrary code on the server hosting the affected WordPress site.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where the affected WordPress site is hosted.

Added: Aug 20, 2025, 8:38 AM
Updated: Aug 20, 2025, 8:38 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
6.4
remediation
0.0
relevance
0.4
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.