CVE-2023-2287

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published May 30, 2023
Updated: Jan 10, 2025
CWE ID 200

Summary

CVE-2023-2287 is a vulnerability affecting the Orbit Fox plugin used in WordPress sites before version 2.10.24. This issue permits user-supplied URLs in the stock photo import feature without proper validation, resulting in server-side request forgery. Malicious users can manipulate the server to access any URL of their choosing, potentially leading to unauthorized data access or other security breaches. It is crucial for WordPress site owners using the Orbit Fox plugin to update to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • IBM QRadar SIEM

Affected Vendors

  • IBM Corporation

Advisories, Assessments, and Mitigations