WordPress Kanban Boards for WordPress Plugin <= 2.5.21 is vulnerable to Arbitrary Code Execution
CVE-2023-40606

9.1CRITICAL

Key Information:

Vendor
Wordpress
Status
Kanban Boards For WordPress
Vendor
CVE Published:
29 December 2023

Summary

An improper control of code generation vulnerability was found in the Kanban Boards for WordPress plugin. This flaw allows for arbitrary code execution, which can be exploited by attackers to inject malicious code into the application. Affected versions range from n/a through 2.5.21, potentially compromising the integrity and security of WordPress sites using this plugin.

Affected Version(s)

Kanban Boards for WordPress <= 2.5.21

References

https://patchstack.com/database/vulnerability/kanban/word...
vdb-entry

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

TomS (Patchstack Alliance)
.