← CVE Intelligence

CVE-2023-0467

WP Dark Mode < 4.0.8 - Subscriber+ Local File Inclusion PUBLISHED

Description (CNA)

The WP Dark Mode WordPress plugin before 4.0.8 does not properly sanitize the style parameter in shortcodes before using it to load a PHP template. This leads to Local File Inclusion on servers where non-existent directories may be traversed, or when chained with another vulnerability allowing arbitrary directory creation.

Affected (CNA)

Vendor / productVersions
Unknown / WP Dark Modeaffected 0 before 4.0.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.