Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2017-09-11	CVE-2015-8351	Code Injection vulnerability in Gwolle Guestbook Project Gwolle Guestbook PHP remote file inclusion vulnerability in the Gwolle Guestbook plugin before 1.5.4 for WordPress, when allow_url_include is enabled, allows remote authenticated users to execute arbitrary PHP code via a URL in the abspath parameter to frontend/captcha/ajaxresponse.php. network high complexity gwolle-guestbook-project CWE-94 critical	9.0