CVE-2023-2496

2023-05-2400:15:09

[email protected]

web.nvd.nist.gov

cve-2023-2496

nvd

go pricing

wordpress

plugin

vulnerability

unauthorized file upload

remote code execution

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.4%

JSON

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improper capability check on the ‘validate_upload’ function in versions up to, and including, 3.3.19. This makes it possible for authenticated attackers with a role that the administrator previously granted access to the plugin to upload arbitrary files on the affected site’s server which may make remote code execution possible.

Affected configurations

Vulners

NVD

Node

granthgo_pricing_-_wordpress_responsive_pricing_tablesRange≤3.3.19

CPENameOperatorVersion
granthweb:go_pricinggranthweb go pricingle3.3.19

CPE	Name	Operator	Version
granthweb:go_pricing	granthweb go pricing	le	3.3.19

CNA Affected

[
  {
    "vendor": "Granth",
    "product": "Go Pricing - WordPress Responsive Pricing Tables",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "3.3.19",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]