Security Advisory
CVE-2023-6623
9.8
CRITICAL
Vulnerability Description
The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which may lead to Local File Inclusion attacks.
Published Date
January 15, 2024
Official Source
NIST NVD Advisory