CVE-2023-5099

Summary

CVE-2023-5099 is a vulnerability affecting the HTML filter and csv-file search plugin for WordPress. This issue allows authenticated attackers, with contributor-level permissions and above, to execute arbitrary files on the server through the 'src' attribute of the 'csvsearch' shortcode. This vulnerability can be exploited to bypass access controls, obtain sensitive data, or achieve code execution, making it a significant security risk for WordPress websites using the affected plugin versions up to and including 2.7.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.