PT-2023-31118 · WordPress · Wpb Show Core

Mohamed Abdelhady · Publicado 2023-11-27 · Atualizado 2023-12-01 · CVE-2023-4922

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WPB Show Core WordPress plugin versions through 2.2

Description The issue concerns a local file inclusion vulnerability via the path parameter. This allows for potential unauthorized access to sensitive files on the system.

Recommendations For WPB Show Core WordPress plugin versions through 2.2, update to a version that fixes this issue, as using the path parameter can lead to local file inclusion. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2023-4922

Produtos afetados

Wpb Show Core

Referências · 4

• 🔥 https://wpscan.com/vulnerability/968d87c0-af60-45ea-b34e-8551313cc8df · Exploit
• https://t.me/cvenotify/61919 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-4922 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-4922 · Nota de Segurança