CVE-2023-4386

Summary

CVE-2023-4386 is a vulnerability affecting the Essential Blocks plugin for WordPress. This issue allows unauthenticated attackers to inject PHP Objects through deserialization of untrusted inputs in the get_posts function, up to and including version 4.2.0. No Pop chain is present in the vulnerable plugin itself. However, if such a chain exists via an additional plugin or theme installed on the target system, an attacker could potentially delete arbitrary files, retrieve sensitive data, or execute code.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.