CVE-2023-46623

CVE-2023-46623 affects the WordPress WP EXtra plugin (versions ≤ 6.2). The vulnerability is described as a remote code execution (RCE) due to improper control of code generation, reportedly exploitable via htaccess modifications. A fix is available in version 6.3. Reported CVSS scores indicate hi...

WordPress WP EXtra Plugin <= 6.2 is vulnerable to Remote Code Execution (RCE)

Software WP EXtra Type Plugin Vulnerable versions = 6.2 Fixed in 6.3 OWASP Top 10 A3: Injection Classification Remote Code Execution RCE CVE CVE-2023-46623 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 4dd4ccde8243 Credits TP Cyber Security Required privilege Subscribe...