CVE-2023-6295
18.12.2023, 20:15
The SiteOrigin Widgets Bundle WordPress plugin before 1.51.0 does not validate user input before using it to generate paths passed to include function/s, allowing users with the administrator role to perform LFI attacks in the context of Multisite WordPress sites.Enginsight
| Vendor | Product | Version |
|---|---|---|
| siteorigin | siteorigin_widgets_bundle | 𝑥 < 1.51.0 |
𝑥
= Vulnerable software versions