Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-2833. PoCs published by Alucard0x1.
AI-analyzed exploit summary The repository claims to exploit CVE-2023-2833 (privilege escalation in ReviewX WordPress plugin) but lacks actual exploit code, instead directing users to run an external executable ('Alucard0x1MassExploit.exe') and providing vague instructions. No technical details or code are included.
Description
The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wp_screen_options[option]' and 'wp_screen_options[value]' parameters during a screen option update.
Exploits (1)
The repository claims to exploit CVE-2023-2833 (privilege escalation in ReviewX WordPress plugin) but lacks actual exploit code, instead directing users to run an external executable ('Alucard0x1MassExploit.exe') and providing vague instructions. No technical details or code are included.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H