CVE-2023-54352
WordPress Seotheme contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by uploading malicious files to the theme directory. Attackers can access the uploaded PHP shell at /wp-content/themes/seotheme/mar.php to execute system commands and upload additional files for persistent access.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Deferred - disclosure@vulncheck.com
- Published
- 2026-06-08
- Last modified
- 2026-06-08
- Weaknesses
- CWE-306
Affected products
References
- https://www.exploit-db.com/exploits/51789
- https://www.vulncheck.com/advisories/wordpress-seotheme-remote-code-execution-unauthenticated
