CVE-2023-6623 — Essential Blocks < 4.4.3 - Unauthenticated Local File Inclusion
The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which …
Published: 2024-01-15 · CVSS: 9.8 · CVSS 3.1
The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which may lead to Local File Inclusion attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7