Lucene search
PRIOn knowledge basePRION:CVE-2023-6295HistoryDec 18, 2023 - 8:15 p.m.
Design/Logic Flaw
2023-12-1820:15:00
PRIOn knowledge base
www.prio-n.com
5
design flaw
logic flaw
siteorigin widgets bundle
wordpress plugin
lfi attacks
multisite wordpress
The SiteOrigin Widgets Bundle WordPress plugin before 1.51.0 does not validate user input before using it to generate paths passed to include function/s, allowing users with the administrator role to perform LFI attacks in the context of Multisite WordPress sites.
| CPE | Name | Operator | Version |
|---|---|---|---|
| siteorigin_widgets_bundle | lt | 1.51.0 |
Related
cve
cve
CVE-2023-6295
2023-12-18 20:15:09
openvas
openvas
WordPress SiteOrigin Widgets Bundle Plugin < 1.51.0 LFI Vulnerability
2024-01-04 00:00:00
nvd
nvd
CVE-2023-6295
2023-12-18 20:15:09
wpvulndb
wpvulndb
so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion
2023-11-27 00:00:00
wpexploit
wpexploit
so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion
2023-11-27 00:00:00
cvelist
cvelist
CVE-2023-6295 so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion
2023-12-18 20:08:01
wordfence
wordfence