CVE-2023-5201

OpenHook (WordPress plugin) is vulnerable to Remote Code Execution up to and including version 4.3.0 via the php shortcode. Exploitation requires the php shortcode setting to be enabled and an attacker with subscriber privileges or higher. The vulnerability is documented as CVE-2023-5201. Patch s...