References https://avd.aliyun.com/detail?id=AVD-2023-4634 https://cve.imfht.com/detail/CVE-2023-4634 https://nvd.nist.gov/vuln/detail/CVE-2023-4634 https://www.cve.org/CVERecord?id=CVE-2023-4634 https://github.com/Patrowl/CVE-2023-4634 https://patrowl.io/en/blog/wordpress-media-library-rce-cve-2023-4634 https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=34824 https://www.exploit-db.com/exploits/51737 https://patchstack.com/database/wordpress/plugin/media-library-assistant/vulnerability/wordpress-media-library-assistant-plugin-3-09-unauthenticated-local-remote-file-inclusion-and-code-execution-vulnerability https://www.appsecure.security/vulnerability-database/cve-2023-4634/ https://socprime.com/blog/latest-threats/cve-2023-4634/ https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2023-1158.html
Related VulnerabilitiesPoCCVE-2026-41948: Dify <=1.14.1 - Unauthenticated Plugin Daemon Path TraversalJeecgBoot 积木报表 /jmreport/auto/export/python/plugin 代码执行漏洞Wordpress Events Calendar插件敏感信息泄露漏洞(CVE-2025-9808)WordPress Directory Kit 插件敏感信息泄露漏洞(CVE-2025-13920)PoCCVE-2025-14998: Branda WordPress plugin - Privilege EscalationPoCCVE-2022-1281: Photo Gallery WordPress v1.6.3 - SQL InjectionPoCCVE-2026-12394: WordPress MemberGlut < 1.1.5 - Unauthenticated Privilege EscalationMediaWiki EasyTimeline远程代码执行漏洞(CVE-2026-8857)PoCCVE-2026-55224: MineAdmin < 3.2.0-alpha.2 - Plugin Path Traversal to RCEPoCCVE-2019-1003030: Jenkins Pipeline Groovy Plugin <=2.63 - Insecure DeserializationPoCharman-media-suite-lfi: Harman Media Suite <= 4.2.0 - Local File DisclosurePoCsimple-file-list-rce: WordPress Simple File List <=4.2.2 - Remote Code ExecutionPoCCVE-2026-13147: WordPress Kirki < 6.0.12 - Server-Side Request Forgery