Lucene search
PRIOn knowledge basePRION:CVE-2023-4971HistoryOct 16, 2023 - 8:15 p.m.
Design/Logic Flaw
2023-10-1620:15:00
PRIOn knowledge base
www.prio-n.com
5
weaver xtreme theme
wordpress
php object injection
vulnerability
0.001 Low
EPSS
Percentile
19.4%
The Weaver Xtreme Theme Support WordPress plugin before 6.3.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog.
| CPE | Name | Operator | Version |
|---|---|---|---|
| weaver_xtreme_theme_support | lt | 6.3.1 |
Related
cve
cve
CVE-2023-4971
2023-10-16 20:15:17
cvelist
cvelist
nvd
nvd
CVE-2023-4971
2023-10-16 20:15:17
wpexploit
wpexploit
Weaver Xtreme Theme Support < 6.3.1 - Admin+ PHP Object Injection
2023-09-19 00:00:00
wpvulndb
wpvulndb
Weaver Xtreme Theme Support < 6.3.1 - Admin+ PHP Object Injection
2023-09-19 00:00:00
wordfence
wordfence