CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. It affects WordPress. Exploitation may require the attacker to be authenticated.
CVE
CVE-2023-4536
Severity
HIGH
CVSS
8.8
EPSS
0.82%
WordPress
Original NVD Description
The My Account Page Editor WordPress plugin before 1.3.2 does not validate the profile picture to be uploaded, allowing any authenticated users, such as subscriber to upload arbitrary files to the server, leading to RCE