← voltar
CVE-2023-5931

rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE

EPSS 0.8%
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g. subscribers) to upload arbitrary files such as PHP on the server

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →