Lucene search
HistoryJul 04, 2023 - 8:15 a.m.
CVE-2023-1273
nd shortcodes
wordpress
plugin
authenticated users
lfi attacks
cve-2023-1273
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0.001
Percentile
32.1%
The ND Shortcodes WordPress plugin before 7.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks
Affected configurations
Node
nicdarknd_shortcodesRange<7.0wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| nicdark | nd_shortcodes | * | cpe:2.3:a:nicdark:nd_shortcodes:*:*:*:*:*:wordpress:*:* |
Related
githubexploit
githubexploit
Exploit for CVE-2023-1273
2023-09-12 00:10:58
cvelist
cvelist
CVE-2023-1273 ND Shortcodes < 7.0 - Subscriber+ LFI
2023-07-04 07:23:31
prion
prion
Code injection
2023-07-04 08:15:00
wpexploit
wpexploit
ND Shortcodes < 7.0 - Subscriber+ LFI
2023-06-12 00:00:00
wpvulndb
wpvulndb
ND Shortcodes < 7.0 - Subscriber+ LFI
2023-06-12 00:00:00
cve
cve
CVE-2023-1273
2023-07-04 08:15:10
wordfence
wordfence
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0.001
Percentile
32.1%
Related for NVD:CVE-2023-1273