Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-2996

The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary files, and in rare cases achieve Remote Code Execution via phar deserialization.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.217
EPSS Ranking 95.4%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2023-2996


Contact Us

Shodan ® - All rights reserved