CVE-2023-4596

Summary

CVE-2023-4596 is a vulnerability affecting the Forminator plugin for WordPress. The issue lies in the upload_post_image() function, which processes file type validation after a file has been uploaded to the server. As a result, unauthenticated attackers can exploit this flaw to upload arbitrary files, potentially enabling remote code execution on affected sites. This vulnerability exists in versions up to and including 1.24.6 of the plugin.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.