Lucene search

K
wpvulndbWpvulndbWPVDB-ID:5BD9FBD2-26EA-404A-ABA7-F0C457A082B6
HistoryOct 01, 2023 - 12:00 a.m.

OpenHook < 4.3.1 - Subscriber+ Remote Code Execution

2023-10-0100:00:00
wpscan.com
5
openhook
plugin
security
remote code execution
subscriber+

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.5%

Description The plugin does not prevent low-privileged users like subscribers from using its ‘php’ shortcode feature, leading to potential Remote Code Execution.

CPENameOperatorVersion
eq4.3.1

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.5%

Related for WPVDB-ID:5BD9FBD2-26EA-404A-ABA7-F0C457A082B6