High severity7.2NVD Advisory· Published Oct 16, 2023· Updated Jun 17, 2026
CVE-2023-4971
CVE-2023-4971
Description
The Weaver Xtreme Theme Support WordPress plugin before 6.3.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Weaver Xtreme Theme Supportdescription
- Range: <6.3.1
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/421194e1-6c3f-4972-8f3c-de1b9d2bcb13nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.