Lucene search
HistoryJul 10, 2023 - 4:15 p.m.
CVE-2023-1208
http headers
wordpress
arbitrary data
remote code execution
vulnerability
cve-2023-1208
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
57.4%
This HTTP Headers WordPress plugin before 1.18.11 allows arbitrary data to be written to arbitrary files, leading to a Remote Code Execution vulnerability.
Affected configurations
Node
riversidehttp_headersRange<1.18.11wordpress
Related
wpexploit
wpexploit
HTTP Headers < 1.18.11 - Admin+ Remote Code Execution
2023-06-19 00:00:00
prion
prion
Remote code execution
2023-07-10 16:15:00
cvelist
cvelist
CVE-2023-1208 HTTP Headers < 1.18.11 - Admin+ Remote Code Execution
2023-07-10 12:41:23
cve
cve
CVE-2023-1208
2023-07-10 16:15:48
wpvulndb
wpvulndb
HTTP Headers < 1.18.11 - Admin+ Remote Code Execution
2023-06-19 00:00:00
wordfence
wordfence
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
57.4%
Related for NVD:CVE-2023-1208