Description
Wordpress 插件 Essential Blocks是 WordPress 的 Gutenberg 块库，可为块编辑器增添功能并创建网站。Wordpress 插件 Essential Blocks 4.4.3 之前的版本被发现容易受到严重的本地文件包含漏洞的攻击，攻击者获取系统配置文件等敏感信息。
Wordpress 插件 Essential Blocks /index.php 文件读取漏洞（CVE-2023-6623）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-6623
https://wpscan.com/vulnerability/633c28e0-0c9e-4e68-9424-55c32789b41f/
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/essential-blocks/essential-blocks-442-unauthenticated-local-file-inclusion
https://s3cur1ty.ch/posts/essential-blocks/
https://pentest-tools.com/vulnerabilities-exploits/essential-blocks-443-local-file-inclusion_22451
https://github.com/advisories/GHSA-phjg-gj5x-8j96
https://vuldb.com/vuln/250747
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6623
https://s4e.io/tools/essential-blocks-plugin-for-wordpress-local-file-inclusion-lfi-cve-2023-6623