Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder connector that allows unauthenticated attackers to upload and execute arbitrary PHP files. Attackers can send POST requests to the connector.minimal.php endpoint with mkfile and put commands to create malicious PHP files in the file_manager directory and execute them on the server.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-08 | 4 | Disclosure4 |
| 2026-06-10 | 1 | Disclosure1 |
Patching windows matter. CVE-2023-54350 is a good reminder why. WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder connector that... New week. Sharper than the last.
Post summary
The post highlights CVE-2023-54350 as a remote code execution flaw in the WordPress Augmented‑Reality plugin’s elFinder connector, stressing the need for prompt patching.
🚨*CVE* CVE-2023-54350 WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder connector that allows unauthenticated attackers to upload and execut… https://www.cve.org/CVERecord?id=CVE-2023-54350 ----- Traducción: CVE-2023-54350 el … http://infoflow.cloud`
Post summary
The tweet announces CVE‑2023‑54350, a remote code execution flaw in a WordPress Augmented‑Reality plugin’s elFinder connector that permits unauthenticated upload and execution, and links to the CVE record.
CVE-2023-54350 WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder connector that allows unauthenticated attackers to upload and execut… https://www.cve.org/CVERecord?id=CVE-2023-54350
Post summary
The post announces a remote code execution vulnerability (CVE-2023-54350) in a WordPress plugin, providing minimal technical detail and no further information on exploits, patches, or active use.
CVE-2023-54350 Remote Code Execution in WordPress Augmented-Reality Plug... https://vulmon.com/vulnerabilitydetails?qid=CVE-2023-54350 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The post announces a Remote Code Execution vulnerability (CVE-2023-54350) in a WordPress Augmented‑Reality plugin, providing a link to detailed outlook but no PoC, exploit, patch, or active exploitation evidence.
Two unauthenticated remote code execution flaws in WordPress Augmented-Reality and Seotheme plugins, tracked as CVE-2023-54350 and CVE-2023-54352, allow arbitrary PHP uploads and execution, according to VulnCheck. https://threatcluster.io/cluster/critical-remote-code-execution-vulnerabilities-in-wordpress--3d89352f
Post summary
The tweet announces two WordPress plugin vulnerabilities (CVE-2023-54350 and CVE-2023-54352) that allow unauthenticated remote code execution via arbitrary PHP file uploads.