Lucene search
PRIOn knowledge basePRION:CVE-2023-2496HistoryMay 24, 2023 - 12:15 a.m.
Input validation
2023-05-2400:15:00
PRIOn knowledge base
www.prio-n.com
3
go pricing
wordpress
unauthorized uploads
remote code execution
vulnerability
nvd
The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improper capability check on the ‘validate_upload’ function in versions up to, and including, 3.3.19. This makes it possible for authenticated attackers with a role that the administrator previously granted access to the plugin to upload arbitrary files on the affected site’s server which may make remote code execution possible.
| CPE | Name | Operator | Version |
|---|---|---|---|
| go_pricing | le | 3.3.19 |
Related
wpvulndb
wpvulndb
nvd
nvd
CVE-2023-2496
2023-05-24 00:15:09
cve
cve
CVE-2023-2496
2023-05-24 00:15:09
cvelist
cvelist
CVE-2023-2496
2023-05-23 23:36:47
wordfence
wordfence
2023’s Critical WordPress Vulnerabilities and How They Work
2024-02-12 19:11:21