vendor:
Seotheme
by:
Milad Karimi (Ex3ptionaL)
6.1
CVSS
HIGH
Remote Code Execution
94
CWE
Product Name: Seotheme
Affected Version From: Not specified
Affected Version To: Not specified
Patch Exists: NO
Related CWE: Not provided
CPE: a:wordpress:seotheme
Platforms Tested: Windows 10, Firefox
2023
WordPress Seotheme – Remote Code Execution Unauthenticated
The exploit allows remote attackers to execute arbitrary code on the target system without authentication. The vulnerability is due to improper input validation in the Wordpress Seotheme. The exploit code provided in the script allows attackers to upload a web shell and gain control over the target system.
Mitigation:
To mitigate this vulnerability, ensure the Wordpress Seotheme is updated to the latest version, apply proper input validation mechanisms, and restrict access to sensitive functionalities.
