
Cloud Vulnerability DB
A community-led vulnerabilities database
The vulnerability identified as CVE-2023-49837 affects the WordPress Code Embed plugin versions through 2.3.6. This security issue was discovered and reported by a researcher known as Universe on October 29, 2023, and was publicly disclosed on December 5, 2023. The vulnerability is classified as an Uncontrolled Resource Consumption issue (CWE-400) in David Artiss Code Embed plugin (Patchstack).
The vulnerability has been assigned a CVSS score of 6.5 (Medium severity). It is categorized under the OWASP Top 10 as A4: Insecure Design and specifically relates to Denial of Service Attack capabilities. The vulnerability requires Contributor-level privileges or higher to exploit (Patchstack).
When exploited, this vulnerability can lead to a Denial of Service condition where the affected website may crash or become unresponsive to user requests. The impact can result in the endpoint becoming unusable, hanging, or refusing to serve requests to one or more users (Patchstack).
The vulnerability has been patched in version 2.3.7 of the Code Embed plugin. Users are advised to update to version 2.3.7 or later to remove the vulnerability. Patchstack users have the additional option to enable auto-update functionality for vulnerable plugins (Patchstack).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."