cbcvebase.

Hit-Reach Allow Php In Posts And Pages vulnerabilities

1 known vulnerability affecting hit-reach/allow_php_in_posts_and_pages.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2023-4994P2MEDIUMCVSS 6.4Exploited≤ 3.0.42023-09-16
CVE-2023-4994 [MEDIUM] CWE-94 CVE-2023-4994: The Allow PHP in Posts and Pages plugin for WordPress is vulnerable to Remote Code Execution in vers The Allow PHP in Posts and Pages plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.0.4 via the 'php' shortcode. This allows authenticated attackers with subscriber-level permissions or above, to execute code on the server.
nvd
Hit-Reach Allow Php In Posts And Pages vulnerabilities | cvebase