Lucene search
PRIOn knowledge basePRION:CVE-2023-1381HistoryApr 10, 2023 - 3:15 p.m.
Deserialization of untrusted data
2023-04-1015:15:00
PRIOn knowledge base
www.prio-n.com
7
deserialization
untrusted data
image files
phar
vulnerability
gadget chain
remote code execution
wordpress plugin
The WP Meta SEO WordPress plugin before 4.5.5 does not validate image file paths before attempting to manipulate the image files, leading to a PHAR deserialization vulnerability. Furthermore, the plugin contains a gadget chain which may be used in certain configurations to achieve remote code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_meta_seo | lt | 4.5.5 |
Related
wpvulndb
wpvulndb
WP Meta SEO < 4.5.5 - Author+ PHAR Deserialization
2023-03-27 00:00:00
cvelist
cvelist
CVE-2023-1381 WP Meta SEO < 4.5.5 - Author+ PHAR Deserialization
2023-04-10 14:14:39
wpexploit
wpexploit
WP Meta SEO < 4.5.5 - Author+ PHAR Deserialization
2023-03-27 00:00:00
nvd
nvd
CVE-2023-1381
2023-04-10 15:15:07
cve
cve
CVE-2023-1381
2023-04-10 15:15:07
wordfence
wordfence