CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2023-40606

WordPress Kanban Boards for WordPress Plugin <= 2.5.21 is vulnerable to Arbitrary Code Execution

Status: Published
Published: 2023-12-29
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Kanban for WordPress Kanban Boards for WordPress.This issue affects Kanban Boards for WordPress: from n/a through 2.5.21.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kanban for WordPress Kanban Boards for WordPress

Default version status: unaffected

n/a to ≤ 2.5.21affected

References

https://patchstack.com/database/vulnerability/kanban/wordpress-kanban-boards-for-wordpress-plugin-2-5-21-arbitrary-code-execution-vulnerability?_s_id=cve ↗