CVE-2023-5414

Name of the Vulnerable Software and Affected Versions Icegram Express plugin for WordPress versions up to, and including, 5.6.23

Description The issue allows administrator-level attackers to read the contents of arbitrary files on the server, which can contain sensitive information, including those belonging to other sites, for example in shared hosting environments. This is achieved via the show es logs function.

Recommendations For versions up to, and including, 5.6.23, consider disabling the show es logs function until a patch is available to prevent potential exploitation.