High severity7.2NVD Advisory· Published Dec 18, 2023· Updated Jun 17, 2026
CVE-2023-6295
CVE-2023-6295
Description
The SiteOrigin Widgets Bundle WordPress plugin before 1.51.0 does not validate user input before using it to generate paths passed to include function/s, allowing users with the administrator role to perform LFI attacks in the context of Multisite WordPress sites.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:siteorigin:siteorigin_widgets_bundle:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:siteorigin:siteorigin_widgets_bundle:*:*:*:*:*:wordpress:*:*range: <1.51.0
- (no CPE)range: 0
- Range: <1.51.0
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/adc9ed9f-55b4-43a9-a79d-c7120764f47cnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.