CVE-2023-47840 – WordPress Qode Essential Addons Plugin <= 1.5.2 is vulnerable to Remote Code Execution (RCE)

https://notcve.org/view.php?id=CVE-2023-47840

27 Nov 2023 — Improper Control of Generation of Code ('Code Injection') vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2. Vulnerabilidad de control inadecuado de la generación de código ("inyección de código") en Qode Interactive Qode Essential Addons. Este problema afecta a Qode Essential Addons: desde n/a hasta 1.5.2. The Qode Essential Addons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check ... • https://github.com/RandomRobbieBF/CVE-2023-47840 • CWE-94: Improper Control of Generation of Code ('Code Injection') CWE-862: Missing Authorization •