Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-74816
HistoryOct 31, 2022 - 12:00 a.m.

WordPress theme Bricks Remote Code Execution Vulnerability

2022-10-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
wordpress
bricks
remote code execution
vulnerability
php
mysql
blogging platform

7.9 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.5%

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress theme is a theme for WordPress. A remote code execution vulnerability exists in WordPress theme Bricks plugin 1.2 and later, versions prior to 1.5.4. An attacker can exploit the vulnerability to edit any page, post, or template on a vulnerable WordPress site and inject a code execution block that can be used to enable remote code execution.

CPENameOperatorVersion
wordpress theme bricks >=1.2,lt1.5.4

7.9 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.5%