Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-1406

JetEngine < 3.1.3.1 - Author+ Remote Code Execution

Description

The JetEngine WordPress plugin before 3.1.3.1 includes uploaded files without adequately ensuring that they are not executable, leading to a remote code execution vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown JetEngine

Default version status: unaffected

  • 0 to < 3.1.3.1affected

References