← volver
CVE-2023-5931

rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE

EPSS 0.8%
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g. subscribers) to upload arbitrary files such as PHP on the server

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →