CVE-2023-47846 WordPress WP Githuber MD plugin <= 1.16.2 - Arbitrary File Upload vulnerability
Attackers can upload malicious files to the WP Githuber MD WordPress plugin, potentially leading to remote code execution.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-47846?
CVE-2023-47846 is a critical vulnerability in Terry Lin WP Githuber MD, published on 26 Mar 2024. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Unrestricted Upload of File with Dangerous Type vulnerability in Terry Lin WP Githuber MD.This issue affects WP Githuber MD: from n/a through 1.16.2.
Weakness: CWE-434
Which versions are affected by CVE-2023-47846?
It affects 1 product.
Products include Terryl Wp Githuber Md.
How do I fix CVE-2023-47846?
No fix has been published for CVE-2023-47846 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-47846 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-47846 exists.
Other vulnerabilities in Terry Lin WP Githuber MD
Sources
Also known as GHSA-hcq9-8j5c-v9xw.