CVE Intelligence

Themeisle Otter vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Themeisle Otter: 1 record(s), with affected versions and fixes.
cpe:2.3:a:themeisle:otter

CVE-2023-2288 High · 8.8 CWE-502 May 30, 2023
Otter - Gutenberg Blocks < 2.2.6 - Author+ PHAR Deserialization
The Otter WordPress plugin before 2.2.6 does not sanitize some user-controlled file paths before performing file operations on them. This leads to a PHAR deserialization vulnerability on PHP < 8.0 using the phar:// stream wrapper.