CVE-2023-1273
ND Shortcodes < 7.0 - Subscriber+ LFI
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The ND Shortcodes WordPress plugin before 7.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks
The ND Shortcodes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 6.9 the plugin's shortcodes. This allows authenticated attackers with subscriber-level permissions, and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
*Credits:
Erwan LR (WPScan), WPScan
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-03-08 CVE Reserved
- 2023-06-12 CVE Published
- 2023-09-12 First Exploit
- 2024-07-10 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-98: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
CAPEC
References (2)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|---|---|
| https://github.com/codeb0ss/CVE-2023-1273-PoC | 2023-09-12 | |
| https://wpscan.com/vulnerability/0805ed7e-395d-48de-b484-6c3ec1cd4b8e | 2024-08-02 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Nicdark Search vendor "Nicdark" | Nd Shortcodes Search vendor "Nicdark" for product "Nd Shortcodes" | < 7.0 Search vendor "Nicdark" for product "Nd Shortcodes" and version " < 7.0" | wordpress |
Affected
| ||||||