Beveiligingsadvies

CVE-2023-6140

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-01-08 19:00:36

Laatst bijgewerkt 2024-09-04 15:36:41

Toegewezen door WPScan

CVSS-score 8.8

Status PUBLISHED

Beschrijving

The Essential Real Estate WordPress plugin before 4.4.0 does not prevent users with limited privileges on the site, like subscribers, from momentarily uploading malicious PHP files disguised as ZIP archives, which may lead to remote code execution.

← Alle CVE's bekijken Bekijk op cve.org ↗