The Allow PHP in Posts and Pages plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.0.4 via the 'php' shortcode. This allows authenticated attackers with subscriber-level permissions or above, to execute code on the server.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Wordfence
Published: 2023-09-16T01:52:17.856Z
Updated: 2024-08-02T07:44:53.851Z
Reserved: 2023-09-15T12:35:52.070Z
Link: CVE-2023-4994
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-09-16T02:15:07.990
Modified: 2023-11-07T04:23:17.237
Link: CVE-2023-4994
Redhat
No data.