Vulnerability · Published Jul 10, 2023 · Assigned by WPScan

CVE-2023-1208HTTP Headers < 1.18.11 - Admin+ Remote Code Execution

High 7.2

In plain English

A high-severity security flaw in HTTP Headers from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 78% of all known vulnerabilities).

Severity (CVSS NVD)7.2High

Exploit odds (30 days)1.7%top 22.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

This HTTP Headers WordPress plugin before 1.18.11 allows arbitrary data to be written to arbitrary files, leading to a Remote Code Execution vulnerability.

Affected products (as reported)

Vendor	Product	Versions
Unknown	HTTP Headers	0 – before 1.18.11

References

https://wpscan.com/vulnerability/e0cc6740-866a-4a81-a93d-ff486b79b7f7 exploit, vdb-entry, technical-description