Lucene search
HistoryFeb 13, 2023 - 3:15 p.m.
CVE-2023-0255
cve-2023-0255
enable media replace
arbitrary files
php shells
security vulnerability
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.001
Percentile
43.5%
The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites.
Affected configurations
Node
shortpixelenable_media_replaceRange<4.0.2wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| shortpixel | enable_media_replace | * | cpe:2.3:a:shortpixel:enable_media_replace:*:*:*:*:*:wordpress:*:* |
Related
githubexploit
githubexploit
wpvulndb
wpvulndb
Enable Media Replace < 4.0.2 - Author+ Arbitrary File Upload
2023-01-17 00:00:00
cve
cve
CVE-2023-0255
2023-02-13 15:15:21
openvas
openvas
prion
prion
Design/Logic Flaw
2023-02-13 15:15:00
cvelist
cvelist
CVE-2023-0255 Enable Media Replace < 4.0.2 - Author+ Arbitrary File Upload
2023-02-13 14:32:21
wpexploit
wpexploit
Enable Media Replace < 4.0.2 - Author+ Arbitrary File Upload
2023-01-17 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.001
Percentile
43.5%
Related for NVD:CVE-2023-0255