Jordy Meow Code Engine Remote Code Execution Vulnerability

A code injection vulnerability allowing remote code execution has been identified in the Jordy Meow Code Engine WordPress plugin, affecting versions through 0.3.3. The vulnerability arises from improper control over code generation, leading to remote code inclusion.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected website, potentially leading to unauthorized access and control over the site.

Remediation

Users of the Jordy Meow Code Engine WordPress plugin should update to version 0.3.4 or later. Patchstack users can enable auto-update for vulnerable plugins.