Several WordPress plugins developed by Cool Plugins are vulnerable to arbitrary plugin installation and activation that can lead to remote code execution by authenticated attackers with minimal permissions, such as a sub…
CVSS 3.1HIGH 8.8·Network·Low privileges·No interaction·EPSS 0.01366·Published 2023-06-07·Fixed in 1.3CWE-862