The WP Coder WordPress plugin before 2.5.2 within the wow... · CVE-2021-25053 · GitHub Advisory Database · GitHub

The WP Coder WordPress plugin before 2.5.2 within the wow...

High severity Unreviewed Published Jan 11, 2022 to the GitHub Advisory Database • Updated Feb 3, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

The WP Coder WordPress plugin before 2.5.2 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.

References

Published by the National Vulnerability Database

Jan 10, 2022

Published to the GitHub Advisory Database Jan 11, 2022

Last updated Feb 3, 2023