CVE-2023-4274

Summary

CVE-2023-4274 is a vulnerability affecting the WPvivid plugin for WordPress, specifically versions up to and including 0.9.89. This issue grants authenticated attackers with administrative privileges the ability to perform directory traversal, resulting in the deletion of contents in arbitrary directories on the server. In shared environments, this vulnerability can pose a critical threat, as it allows an attacker to potentially harm other users on the same server.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.