CVE-2023-4238

Katalog CVE

CVSS 7.2 · High EPSS 1,6%

Kerentanan pada miniorange prevent files / folders access. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

The Prevent files / folders access WordPress plugin before 2.5.2 does not validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server.

Rincian

Terbit di NVD

25 September 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

1,6% peluang dieksploitasi; lebih tinggi dari 75,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/53816136-4b1a-4b7d-b73b-08a90c2a638f exploit · advisory pihak ketiga