CVE-2023-49837 WordPress embed-code plugin <= 2.3.6 - Denial of Service Attack vulnerability

2024-03-2117:07:27

CWE-400

Patchstack

github.com

cve

wordpress

embed-code

plugin

denial of service

vulnerability

AI Score

7.1

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Uncontrolled Resource Consumption vulnerability in David Artiss Code Embed.This issue affects Code Embed: from n/a through 2.3.6.

CNA Affected

[
  {
    "vendor": "David Artiss",
    "product": "Code Embed",
    "versions": [
      {
        "status": "affected",
        "changes": [
          {
            "at": "2.3.7",
            "status": "unaffected"
          }
        ],
        "version": "n/a",
        "versionType": "custom",
        "lessThanOrEqual": "2.3.6"
      }
    ],
    "packageName": "simple-embed-code",
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected"
  }
]