CVE Database /
CVE-2023-5201
CVE · High
CVE-2023-5201 — OpenHook [thesis-openhook] < 4.3.1 (closed)
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-5201
|
OpenHook [thesis-openhook] < 4.3.1 (closed) |
Improper Control of Generation of Code ('Code Injection') |
High
8.8
|
< 4.3.1
|
4.3.1 |
2023-09-29 |
—
|
CVE-2023-5201
The OpenHook plugin for WordPress contained a remote code execution flaw in versions prior to 4.3.1 that could be exploited by attackers to run arbitrary commands on affected websites. An attacker leveraging this vulnerability could potentially establish persistent backdoor access and assume complete control over the compromised site. The issue was discovered by Lana Codes and has been resolved in version 4.3.1 and later releases.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings