PT-2023-20616 · WordPress · Get Your Number Wordpress Plugin

Aymane Mazguiti + 1 · Published 2023-06-05 · Updated 2025-01-08 · CVE-2023-2634

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Get your number WordPress plugin versions 1.1.3 and earlier

Description The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed, for example, in a multisite setup.

Recommendations For Get your number WordPress plugin versions 1.1.3 and earlier, update to a version that addresses the sanitization and escaping of its settings to prevent Stored Cross-Site Scripting attacks.

Exploit

Fix

Related Identifiers

CVE-2023-2634

Affected Products

Get Your Number Wordpress Plugin

References · 3

• 🔥 https://wpscan.com/vulnerability/1df111aa-6057-47a2-8e8b-9ef5ec3bb472 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-2634 · Security Note
• https://osv.dev/vulnerability/CVE-2023-2634 · Vendor Advisory