Lucene search
+L

7 matches found

GithubExploit
GithubExploit
added 2024/04/05 6:07 p.m.501 views

Exploit for Command Injection in Thimpress Learnpress

CVE-2023-6634 Exploit Script Description This repository...

9.8CVSS9.8AI score0.08544EPSS
SaveExploits1
Circl
Circl
added 2024/01/11 10:26 a.m.49 views

CVE-2023-6634

creationtimestamp| type| source ---|---|--- 2024-01-11 10:26:49+00:00| seen| https://t.me/ctinow/166436 2024-01-24 08:11:27+00:00| seen| https://t.me/ctinow/172568 2025-02-06 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-06 2025-02-13 00:00:00+00:00| seen| The...

9.8CVSS7AI score0.08544EPSS
SaveExploits1References4
OSV
OSV
added 2024/01/11 9:15 a.m.9 views

CVE-2023-6634

The LearnPress plugin for WordPress is vulnerable to Command Injection in all versions up to, and including, 4.2.5.7 via the getcontent function. This is due to the plugin making use of the calluserfunc function with user input. This makes it possible for unauthenticated attackers to execute any...

9.8CVSS6.3AI score0.08544EPSS
SaveExploits1References2
NVD
NVD
added 2024/01/11 9:15 a.m.64 views

CVE-2023-6634

The LearnPress plugin for WordPress is vulnerable to Command Injection in all versions up to, and including, 4.2.5.7 via the getcontent function. This is due to the plugin making use of the calluserfunc function with user input. This makes it possible for unauthenticated attackers to execute any...

9.8CVSS9.5AI score0.08544EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/01/11 8:32 a.m.61 views

CVE-2023-6634 LearnPress <= 4.2.5.7 - Command Injection

The LearnPress plugin for WordPress is vulnerable to Command Injection in all versions up to, and including, 4.2.5.7 via the getcontent function. This is due to the plugin making use of the calluserfunc function with user input. This makes it possible for unauthenticated attackers to execute any...

8.1CVSS10AI score0.08544EPSS
SaveExploits1References2
CVE
CVE
added 2024/01/11 8:32 a.m.223 views

CVE-2023-6634

CVE-2023-6634 affects the LearnPress WordPress plugin. It allows unauthenticated remote code execution via the get_content function by abusing call_user_func with user input in versions up to and including 4.2.5.7. The vulnerability enables execution of arbitrary public functions with a single pa...

9.8CVSS9.9AI score0.08544EPSS
SaveIn wildExploits1References2Affected Software1
Patchstack
Patchstack
added 2024/01/04 12:00 a.m.32 views

WordPress LearnPress Plugin <= 4.2.5.7 is vulnerable to Remote Code Execution (RCE)

Software LearnPress Type Plugin Vulnerable versions = 4.2.5.7 Fixed in 4.2.5.8 OWASP Top 10 A3: Injection Classification Remote Code Execution RCE CVE CVE-2023-6634 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID acb9af544a85 Credits hir0ot Required privilege...

9.8CVSS7.1AI score0.08544EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder