← CVE Intelligence

CVE-2023-6295

so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion PUBLISHED

Description (CNA)

The SiteOrigin Widgets Bundle WordPress plugin before 1.51.0 does not validate user input before using it to generate paths passed to include function/s, allowing users with the administrator role to perform LFI attacks in the context of Multisite WordPress sites.

Affected (CNA)

Vendor / productVersions
Unknown / SiteOrigin Widgets Bundleaffected 0 before 1.51.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.