CVE-2023-47840: WordPress Qode Essential Addons Plugin <= 1.5.2 is vulnerable to Remote Code Execution (RCE)
Published Dec 29, 2023
·Updated
Improper Control of Generation of Code ('Code Injection') vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2.
Affected Software
1 affected component
Qodeinteractive Qode Essential Addons Wordpress<=1.5.2
Remediation
Information
Update to 1.5.3 or a higher version.
Event History
Dec 29, 2023
CVE Published
via MITRE·09:10 AM
Data Sourced
via MITRE·09:10 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-47840?
CVE-2023-47840 is rated as a high-severity vulnerability due to its potential for code injection.
2
How do I fix CVE-2023-47840?
To fix CVE-2023-47840, update the Qode Essential Addons plugin to version 1.5.3 or higher.
3
What type of vulnerability is CVE-2023-47840?
CVE-2023-47840 is classified as a Code Injection vulnerability.
4
Which versions of Qode Essential Addons are affected by CVE-2023-47840?
CVE-2023-47840 affects Qode Essential Addons versions up to and including 1.5.2.
5
Who is the vendor associated with CVE-2023-47840?
The vendor associated with CVE-2023-47840 is Qode Interactive.