CVE-2023-23645

CRITICO 9.9CVE-2023-23645 · Published 17/05/2024 · updated 17/06/2026

In breve

CVE-2023-23645 è una vulnerabilità CRITICO (CVSS 9.9) che riguarda code snippets extension (mainwp).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.97%, superiore al 62.1% delle vulnerabilità.
Correzione: aggiornare a 4.0.3 o successiva.

Package	Affected versions	Patched versions
code snippets extension mainwp	`< 4.0.3`	`4.0.3`

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in MainWP MainWP Code Snippets Extension allows Code Injection.This issue affects MainWP Code Snippets Extension: from n/a through 4.0.2.

References

patchstack.com/database/vulnerability/mainwp-code-snippets-extension/wordpress-mainwp-code-snippets-extension-plugin-4-0-2-subscriber-arbitrary-php-code-injection-execution-vulnerability · Third Party Advisory

Altre vulnerabilità di code snippets extension

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free