Lucene search
WPScanCVELIST:CVE-2023-1624HistoryApr 24, 2023 - 6:30 p.m.
CVE-2023-1624 WPCode Lite < 2.0.9 - Arbitrary Log File Deletion via CSRF
2023-04-2418:30:56
WPScan
www.cve.org
cve-2023-1624
wpcode lite plugin
csrf
log file deletion
server vulnerability
0.001 Low
EPSS
Percentile
25.2%
The WPCode WordPress plugin before 2.0.9 has a flawed CSRF when deleting log, and does not ensure that the file to be deleted is inside the expected folder. This could allow attackers to make users with the wpcode_activate_snippets capability delete arbitrary log files on the server, including outside of the blog folders
CNA Affected
[
{
"vendor": "Unknown",
"product": "WPCode",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "2.0.9"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
openvas
openvas
nvd
nvd
CVE-2023-1624
2023-04-24 19:15:09
wpexploit
wpexploit
WPCode Lite < 2.0.9 - Arbitrary Log File Deletion via CSRF
2023-04-03 00:00:00
wpvulndb
wpvulndb
WPCode Lite < 2.0.9 - Arbitrary Log File Deletion via CSRF
2023-04-03 00:00:00
prion
prion
Cross site request forgery (csrf)
2023-04-24 19:15:00
cve
cve
CVE-2023-1624
2023-04-24 19:15:09
wordfence
wordfence