Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 29/12/2023 Updated: 04/01/2024

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 0

Improper Control of Generation of Code ('Code Injection') vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a up to and including 1.5.2.

Vulnerable Product	Search on Vulmon	Subscribe to Product
qodeinteractive qode essential addons

Qode Essential Addons <= 1.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation

CVE-2023-47840 Qode Essential Addons <= 152 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation Description: The Qode Essential Addons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the install_plugin() function in all versions up to, and including, 152 This mak

CWE-94 https://patchstack.com/database/vulnerability/qode-essential-addons/wordpress-qode-essential-addons-plugin-1-5-2-arbitrary-plugin-installation-and-activation-vulnerability?_s_id=cve https://nvd.nist.gov https://github.com/RandomRobbieBF/CVE-2023-47840

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-47840

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect