CVE-2023-5201

creationtimestamp| type| source ---|---|--- 2023-09-30 07:38:29+00:00| seen| https://t.me/cibsecurity/71352...

CVE-2023-5201

The OpenHook plugin for WordPress is vulnerable to Remote Code Execution (RCE) in versions up to and including 4.3.0 . The root cause is an insecure 'php' shortcode ; if the [php] shortcode setting is enabled, authenticated attackers with subscriber-level permissions or higher can execute arbitra...

VulnCheck KEV: CVE-2023-5201

The OpenHook plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.3.0 via the 'php' shortcode. This allows authenticated attackers with subscriber-level permissions or above, to execute code on the server. This requires the php shortcode setting to be...

WordPress OpenHook Plugin <= 4.3.0 is vulnerable to Remote Code Execution (RCE)

Software OpenHook Type Plugin Vulnerable versions = 4.3.0 Fixed in 4.3.1 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2023-5201 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 278dfa1831ef Credits István Márton Required privilege Subscriber...