cbcvebase.

Wpengine Better Search Replace vulnerabilities

1 known vulnerability affecting wpengine/better_search_replace.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2023-6933P1CRITICALCVSS 9.8ExploitedPoCfixed in 1.4.5≤ 1.4.42024-02-05
CVE-2023-6933 [CRITICAL] CWE-502 CVE-2023-6933: The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or t
nvd