writeups.xyz / Blog: CVE-2023-4634 - Tricky Unauthenticated RCE on Wordpress Media Library Assistant Plugin using a good old Imagick

Submitter : c2a

Date: 5 September 2023

Bounty : undisclosed

Vulnerabilities :

• LFI
• RCE
• Security Code Review

Programs :

• Media Library Assistant (WordPress Plugin)

Authors :

• Florent (@Pepito_oh)

Link :
https://patrowl.io/blog-wordpress-media-library-rce-cve-2023-4634/