Essential Blocks < 4.4.3 - Local File Inclusion

Wordpress Essential Blocks plugin prior to 4.4.3 was discovered to be vulnerable to a significant Local File Inclusion vulnerability that may be exploited by any attacker, regardless of whether they have an account on the site. id: CVE-2023-6623 info: name: Essential Blocks 4.4.3 - Local File...

CVE-2023-6623

The Essential Blocks WordPress plugin (versions prior to 4.4.3 ) contains a Local File Inclusion vulnerability. The root cause is a failure to prevent unauthenticated attackers from overwriting local variables when rendering templates via the REST API . Exploitation of this flaw allows an attacke...