hit-reach

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

hit-reach records in CISA KEV

No hit-reach vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Allow Php In Posts And Pages 1 record MEDIUM

Records

1 record

TI-2023-04597 CVE-2023-4994 · GHSA-9rpf-8285-qqrv

Allow PHP in Posts and Pages <= 3.0.4 - Authenticated (Subscriber+) Remote Code Execution via Shortcode

MEDIUM 45

The Allow PHP in Posts and Pages plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.0.4 via the 'php' shortcode.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00892 Published 2023-09-16 No fix listed CWE-94

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0