Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 15/01/2024 Updated: 19/01/2024

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

The Essential Blocks WordPress plugin prior to 4.4.3 does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which may lead to Local File Inclusion attacks.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wpdeveloper essential blocks

Check Point Reference: CPAI-2023-1516 Date Published: 12 Feb 2024 Severity: Critical ...

CWE-22 https://wpscan.com/vulnerability/633c28e0-0c9e-4e68-9424-55c32789b41f https://wpscan.com/blog/file-inclusion-vulnerability-fixed-in-essential-blocks-4-4-3/https://nvd.nist.gov https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2023-1516.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-6623

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect