| |
Vulnerability CVE-2023-2288
Published: 2023-05-30
| Description: |
The Otter WordPress plugin before 2.2.6 does not sanitize some user-controlled file paths before performing file operations on them. This leads to a PHAR deserialization vulnerability on PHP < 8.0 using the phar:// stream wrapper. |
Type:
CWE-502 (Deserialization of Untrusted Data)
References: |
https://wpscan.com/vulnerability/93acb4ee-1053-48e1-8b69-c09dc3b2f302
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
