← Database

CVE-2023-1406

HIGH CVSS: 8.8 Published: 2023-04-10 Modified: 2026-06-17

Description

The JetEngine WordPress plugin before 3.1.3.1 includes uploaded files without adequately ensuring that they are not executable, leading to a remote code execution vulnerability.

Affected Platforms

Crocoblock Jetengine For Elementor

Weakness Type

CWE-434

References