Actively Exploited in the Wild
This vulnerability is being actively exploited in the wild.
Sneeit Framework Remote Code Execution Vulnerability
Vulnerability
A remote code execution vulnerability exists in the Sneeit Framework plugin for WordPress, affecting all versions through 8.3. The issue arises in the sneeit_articles_pagination_callback() function, which improperly handles user input by passing it through call_user_func(). This flaw allows unauthenticated attackers to execute arbitrary code on the server, potentially leading to the injection of backdoors or the creation of new administrative user accounts.
Impact
Exploitation of this vulnerability allows for remote code execution on the server where the WordPress site is hosted.
Remediation
Users are advised to update the Sneeit Framework plugin to version 8.4 or a newer patched version.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.