Code Embed < 2.3.7 - Authenticated(Contributor+) Denial of Service

2023-12-0900:00:00

wpscan.com

wordpress

plugin

authenticated attackers

contributor access

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The Code Embed plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 2.3.6. This makes it possible for authenticated attackers, with contributor access and above, to disrupt access to the site.

CPENameOperatorVersion
eq2.3.7

CPE	Name	Operator	Version
		eq	2.3.7

References

www.wordfence.com/threat-intel/vulnerabilities/id/2ef2ded1-dd56-4c33-98dc-d4c69e66568f