Lucene search
PRIOn knowledge basePRION:CVE-2023-6989HistoryFeb 05, 2024 - 10:15 p.m.
Design/Logic Flaw
2024-02-0522:15:00
PRIOn knowledge base
www.prio-n.com
6
shield security
wordpress
local file inclusion
vulnerability
render action template
unauthenticated attack
php code execution
The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the render_action_template parameter. This makes it possible for unauthenticated attacker to include and execute PHP files on the server, allowing the execution of any PHP code in those files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| shield_security | lt | 18.5.10 |
Related
wpvulndb
wpvulndb
wordfence
wordfence
cvelist
cvelist
CVE-2023-6989
2024-02-05 21:21:31
nuclei
nuclei
Shield Security WP Plugin <= 18.5.9 - Local File Inclusion
2024-04-30 09:03:59
nvd
nvd
CVE-2023-6989
2024-02-05 22:15:58
cve
cve
CVE-2023-6989
2024-02-05 22:15:58