Lucene search
PatchstackCVELIST:CVE-2023-23656HistoryMar 26, 2024 - 7:51 p.m.
CVE-2023-23656 WordPress MainWP File Uploader Extension Plugin <= 4.1 - Unauthenticated Arbitrary File Upload Vulnerability
2024-03-2619:51:56
CWE-434
Patchstack
www.cve.org
1
wordpress
mainwp file uploader
unauthenticated
arbitrary file upload
vulnerability
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0
Percentile
9.0%
Unrestricted Upload of File with Dangerous Type vulnerability in MainWP MainWP File Uploader Extension.This issue affects MainWP File Uploader Extension: from n/a through 4.1.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "MainWP File Uploader Extension",
"vendor": "MainWP",
"versions": [
{
"changes": [
{
"at": "4.1.1",
"status": "unaffected"
}
],
"lessThanOrEqual": "4.1",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2023-23656
2024-03-26 20:15:08
nvd
nvd
CVE-2023-23656
2024-03-26 20:15:08
vulnrichment
vulnrichment
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0
Percentile
9.0%
Related for CVELIST:CVE-2023-23656