CVE-2023-5931

Summary

CVE-2023-5931 is a vulnerability affecting the rtMedia plugin used with WordPress, BuddyPress, and bbPress before version 4.6.16. This issue permits low-privilege users, including subscribers, to upload arbitrary files, potentially harmful ones like PHP scripts, without proper validation. Attackers could exploit this vulnerability to gain unauthorized access or execute malicious code on the server. The lack of file validation poses a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.