blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2023-5815

CRITICAL 9.8 CVSS 3.1
Published
November 22, 2023
Last modified
June 17, 2026
NVD status
Modified
Reported by
security@wordfence.com
Weakness
CWE-98
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The News & Blog Designer Pack – WordPress Blog Plugin — (Blog Post Grid, Blog Post Slider, Blog Post Carousel, Blog Post Ticker, Blog Post Masonry) plugin for WordPress is vulnerable to Remote Code Execution via Local File Inclusion in all versions up to, and including, 3.4.1 via the bdp_get_more_post function hooked via a nopriv AJAX. This is due to function utilizing an unsafe extract() method to extract values from the POST variable and passing that input to the include() function. This makes it possible for unauthenticated attackers to include arbitrary PHP files and achieve remote code execution. On vulnerable Docker configurations it may be possible for an attacker to create a PHP file and then subsequently include it to achieve RCE.

Affected WordPress components

  • Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News Plugin · blog-designer-pack
    Confirmed match Active
    Up to and including 3.4.1
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • infornweb Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News — Up to and including 3.4.1
  • infornweb news_\&_blog_designer_pack_wordpress_blog_plugin — Up to and including 3.4.1
  • infornweb news_\&_blog_designer_pack — Up to and including 3.4.1

References

  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2984052%40blog-designer-pack&new=2984052%40blog-designer-pack&sfp_email=&sfph_mail= Patch
  • wordpress.org https://wordpress.org/plugins/blog-designer-pack/ Product
  • www.leavesongs.com https://www.leavesongs.com/PENETRATION/docker-php-include-getshell.html#0x06-pearcmdphp Not Applicable
  • www.wordfence.com https://www.wordfence.com/threat-intel/vulnerabilities/id/2f2bdf11-401a-48af-b1dc-aeeb40b9a384?source=cve Third Party Advisory
  • nvd.nist.gov Official NVD record