CVE-2023-5860

CVE-2023-5860 affects the Icons Font Loader plugin for WordPress, specifically versions up to and including 1.1.2. The vulnerability stems from a lack of file type validation in the upload function, allowing authenticated administrators to upload arbitrary files. This flaw carries a high severity CVSS score of 7.2, indicating that a successful exploit could lead to remote code execution and significant impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code like Metasploit or Nuclei modules, the vulnerability has garnered some community discussion and media coverage.