CVE-2023-6091

Unrestricted Upload of File with Dangerous Type vulnerability in mndpsingh287 Theme Editor.This issue affects Theme Editor: from n/a through 2.7.1...

CVE-2023-6091

CVE-2023-6091 affects the WordPress Theme Editor plugin (mndpsingh287) and its “Theme Editor” component, with vulnerable versions <= 2.7.1. The issue is an Unrestricted Upload of File with Dangerous Type that could enable an attacker with Administrator privileges to upload arbitrary files to t...

WordPress Theme Editor Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload

Software Theme Editor Type Plugin Vulnerable versions = 2.7.1 Fixed in 2.8 OWASP Top 10 A4: Insecure Design Classification Arbitrary File Upload CVE CVE-2023-6091 Patch priority Low CVSS severity Low 7.2 Developer Claim ownership PSID e6961ec7faba Credits Dateoljo of BoB 12th Required privilege...