Otter

otter

Vendor: Themeisle • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2023-2288

1Themeisle

1Otter

Jan 10, 2025

May 30, 2023

N/A· v4

8.8 HIGH· v3

N/A· v2

The Otter WordPress plugin before 2.2.6 does not sanitize some user-controlled file paths before performing file operations on them. This leads to a PHAR deserialization vulnerability on PHP < 8.0 using the phar:// strea...Show more