CVE-2023-4666

Summary

CVE-2023-4666 is a vulnerability affecting the Form Maker plugin by 10Web for WordPress. Prior to version 1.15.20, this plugin fails to validate signatures generated from user input during file creation on the server. This oversight enables unauthenticated users to manipulate file contents, potentially resulting in Remote Code Execution (RCE) attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.