CVE-2023-25050
WordPress Shortcodes Ultimate plugin <= 5.12.6 - Arbitrary File Download vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Vova Anokhin Shortcodes Ultimate allows Absolute Path Traversal.This issue affects Shortcodes Ultimate: from n/a through 5.12.6.
La limitaciĆ³n incorrecta de un nombre de ruta a una vulnerabilidad de directorio restringido ("Path Traversal") en Vova Anokhin Shortcodes Ultimate permite un path traversal absoluto. Este problema afecta a Shortcodes Ultimate: desde n/a hasta 5.12.6.
The Shortcodes Ultimate plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 5.12.6. This is due to insufficient validation on the url being supplied via the "url" attribute of the su_table shortcode. This makes it possible for authenticated attackers, with subscriber-level privileges and above, to supply paths to arbitrary files that will be returned when rendering the shortcode. This can be leveraged to read sensitive configuration files like wp-config.php. This is only exploitable when the Unsafe features option is enabled.
CVSS Scores
SSVC
- Decision:Track
Timeline
- 2023-02-02 CVE Reserved
- 2023-02-10 CVE Published
- 2024-05-17 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CWE-73: External Control of File Name or Path
CAPEC
- CAPEC-597: Absolute Path Traversal
References (1)
URL | Tag | Source |
---|---|---|
https://patchstack.com/database/vulnerability/shortcodes-ultimate/wordpress-shortcodes-ultimate-plugin-5-12-6-arbitrary-file-download-vulnerability?_s_id=cve | Vdb Entry |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Shortcodes Ultimate Search vendor "Shortcodes Ultimate" | Shortcodes Ultimate Search vendor "Shortcodes Ultimate" for product "Shortcodes Ultimate" | >= 0.0.0 <= 5.12.6 Search vendor "Shortcodes Ultimate" for product "Shortcodes Ultimate" and version " >= 0.0.0 <= 5.12.6" | en |
Affected
|