CVE-2023-1406 (published 2023-04-10T13:17:54.722Z)
The JetEngine WordPress plugin before 3.1.3.1 includes uploaded files without adequately ensuring that they are not executable, leading to a remote code execution vulnerability.
Affected products: Vendor: Unknown
Product: JetEngine
Versions: 0