CVE-2023-5201

The OpenHook plugin for WordPress is vulnerable to Remote Code Execution (RCE) in versions up to and including 4.3.0 . The root cause is an insecure 'php' shortcode ; if the [php] shortcode setting is enabled, authenticated attackers with subscriber-level permissions or higher can execute arbitra...