CVE-2023-5762

The Filr WordPress plugin before 1.2.3.6 is vulnerable from an RCE (Remote Code Execution) vulnerability, which allows the operating system to execute commands and fully compromise the server on behalf of a user with Author-level privileges.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

2.02% chance of exploitation in the next 30 days, 80th percentile

Published

2023-12-04

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/6ad99725-eccc-4b61-bce2-668b62619deb

References

• CVE Record
• NVD entry

Related

• CVE-2023-5757
• CVE-2023-5772
• CVE-2023-5753
• CVE-2023-5774
• CVE-2023-5750
• CVE-2023-5779