Lucene search
PRIOn knowledge basePRION:CVE-2023-5843HistoryOct 30, 2023 - 2:15 p.m.
Remote code execution
2023-10-3014:15:00
PRIOn knowledge base
www.prio-n.com
7
wordpress
datafeedr plugin
remote code execution
vulnerability
unauthenticated attackers
server security
The Ads by datafeedr.com plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 1.1.3 via the ‘dfads_ajax_load_ads’ function. This allows unauthenticated attackers to execute code on the server. The parameters of the callable function are limited, they cannot be specified arbitrarily.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ads_by_datafeedr.com | le | 1.1.3 |
Related
wpvulndb
wpvulndb
Ads by datafeedr.com < 1.2.0 - Unauthenticated Remote Code Execution
2023-11-03 00:00:00
cve
cve
CVE-2023-5843
2023-10-30 14:15:10
cvelist
cvelist
CVE-2023-5843
2023-10-30 13:48:58
nvd
nvd
CVE-2023-5843
2023-10-30 14:15:10
wordfence
wordfence