CVE-2023-4402
CVSS 3.1 Score 8.1 of 10 (high)
Details
Summary
CVE-2023-4402 is a vulnerability in the Essential Blocks plugin for WordPress, affecting versions up to and including 4.2.0. The vulnerability allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input in the get_products function. This could potentially enable attackers to delete files, retrieve sensitive data, or execute code if a chain of privilege escalation (POP chain) exists via another installed plugin or theme. The vulnerability has a risk score of 65 and is categorized as high severity, with a CVSSv3 score of 8.1. No remediation steps or information on potential exploits are provided in the given text.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions