NotFound DigiWidgets Image Editor Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the NotFound DigiWidgets Image Editor plugin for WordPress, affecting versions through 1.10. This vulnerability arises from improper control over code generation, allowing for remote code inclusion.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected website, potentially leading to unauthorized access and control over the site.

Remediation

Users of the NotFound DigiWidgets Image Editor plugin are advised to update to a version later than 1.10. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate the vulnerability until an official update is available.