Lucene search
PRIOn knowledge basePRION:CVE-2023-6827HistoryDec 15, 2023 - 8:15 a.m.
Input validation
2023-12-1508:15:00
PRIOn knowledge base
www.prio-n.com
5
wordpress
file upload
vulnerability
arbitrary files
remote code execution
nvd
The Essential Real Estate plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the ‘ajaxUploadFonts’ function in versions up to, and including, 4.3.5. This makes it possible for authenticated attackers with subscriber-level capabilities or above, to upload arbitrary files on the affected site’s server which may make remote code execution possible.
| CPE | Name | Operator | Version |
|---|---|---|---|
| essential_real_estate | le | 4.3.5 |
Related
cvelist
cvelist
CVE-2023-6827
2023-12-15 07:30:42
wpvulndb
wpvulndb
Essential Real Estate < 4.4.0 - Subscriber+ Arbitrary File Upload
2023-12-15 00:00:00
cve
cve
CVE-2023-6827
2023-12-15 08:15:46
nvd
nvd
CVE-2023-6827
2023-12-15 08:15:46
wordfence
wordfence