Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-5201
HistorySep 30, 2023 - 3:15 a.m.

Remote code execution

2023-09-3003:15:00
PRIOn knowledge base
www.prio-n.com
4
wordpress
openhook
remote code execution
vulnerable
server attack
shortcode
nvd

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.5%

The OpenHook plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.3.0 via the ‘php’ shortcode. This allows authenticated attackers with subscriber-level permissions or above, to execute code on the server. This requires the [php] shortcode setting to be enabled on the vulnerable site.

CPENameOperatorVersion
openhookle4.3.0

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.5%

Related for PRION:CVE-2023-5201