WordPress BuddyForms Plugin — Unauthenticated Insecure Deserialization (CVE-2023–26326)
Tags
attack-pattern: Data Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID 6e993613-4969-421c-bc58-d02b0ea68e9d
Fingerprint 9818b713db642602
Analysis status DONE
Considered CTI value 0
Text language
Published March 7, 2023, 8:50 a.m.
Added to db March 7, 2023, 10:26 a.m.
Last updated Nov. 17, 2024, 11:40 p.m.
Headline WordPress BuddyForms Plugin — Unauthenticated Insecure Deserialization (CVE-2023–26326)
Title WordPress BuddyForms Plugin — Unauthenticated Insecure Deserialization (CVE-2023–26326)
Detected Hints/Tags/Attributes 24/1/11
Source URLs
Redirection Url
Details Source https://medium.com/tenable-techblog/wordpress-buddyforms-plugin-unauthenticated-insecure-deserialization-cve-2023-26326-3becb5575ed8?source=rss------infosec-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 168 ✔ Infosec on Medium https://medium.com/feed/tag/infosec 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 3 
cve-2023-26326
Details Domain 140 
wordpress.org
Details File 37 
functions.php
Details File 6 
'.png
Details File 1 
dummy.php
Details File 5 
'test.txt
Details File 3 
evil.php
Details File 103 
test.txt
Details File 13 
1.png
Details Url 1 
https://wordpress.org/plugins/buddyforms
Details Url 1 
http://domain.tld/wp-content/uploads/2023/02/1.png