CVE-2023-5815

The News & Blog Designer Pack – WordPress Blog Plugin — (Blog Post Grid, Blog Post Slider, Blog Post Carousel, Blog Post Ticker, Blog Post Masonry) plugin for WordPress is vulnerable to Remote Code Execution via Local File Inclusion in all versions up to, and including, 3.4.1 via the bdp_get_more_post function hooked via a nopriv AJAX. This is due to function utilizing an unsafe extract() method to extract values from the POST variable and passing that input to the include() function. This makes it possible for unauthenticated attackers to include arbitrary PHP files and achieve remote code execution. On vulnerable Docker configurations it may be possible for an attacker to create a PHP file and then subsequently include it to achieve RCE.

• CWE-98

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2984052%40blog-designer-pack&new=2984052%40blog-designer-pack&sfp_email=&sfph_mail=Patch
• https://wordpress.org/plugins/blog-designer-pack/Product
• https://www.leavesongs.com/PENETRATION/docker-php-include-getshell.html#0x06-pearcmdphpNot Applicable
• https://www.wordfence.com/threat-intel/vulnerabilities/id/2f2bdf11-401a-48af-b1dc-aeeb40b9a384?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2984052%40blog-designer-pack&new=2984052%40blog-designer-pack&sfp_email=&sfph_mail=Patch
• https://wordpress.org/plugins/blog-designer-pack/Product
• https://www.leavesongs.com/PENETRATION/docker-php-include-getshell.html#0x06-pearcmdphpNot Applicable
• https://www.wordfence.com/threat-intel/vulnerabilities/id/2f2bdf11-401a-48af-b1dc-aeeb40b9a384?source=cveThird Party Advisory

Published

Nov 22, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-5809The Popup box WordPress plugin before 3.8.6 does not sanitis…4.8
• CVE-2023-5810A vulnerability, which was classified as problematic, has be…4.8
• CVE-2023-5811A vulnerability, which was classified as problematic, was fo…4.8
• CVE-2023-5812A vulnerability has been found in flusity CMS and classified…8.8
• CVE-2023-5813A vulnerability was found in SourceCodester Task Reminder Sy…8.8
• CVE-2023-5814A vulnerability was found in SourceCodester Task Reminder Sy…8.8
• CVE-2023-5816The Code Explorer plugin for WordPress is vulnerable to arbi…4.9
• CVE-2023-5817The Neon text plugin for WordPress is vulnerable to Stored C…5.4
• CVE-2023-5818The Amazonify plugin for WordPress is vulnerable to Cross-Si…4.3
• CVE-2023-5819The Amazonify plugin for WordPress is vulnerable to Stored C…4.8
• CVE-2023-5820The Thumbnail Slider With Lightbox plugin for WordPress is v…8.8
• CVE-2023-5821The Thumbnail carousel slider plugin for WordPress is vulner…6.5