Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-6623

Essential Blocks < 4.4.3 - Unauthenticated Local File Inclusion

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which may lead to Local File Inclusion attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Essential Blocks

Default version status: unaffected

  • 0 to < 4.4.3affected

References