Skip to content
Sign in
7.2 High

CVE-2023-4300 The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files,…

Description

The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files, allowing an attacker to upload a malicious PHP file, leading to Remote Code Execution.

Affected products and versions

Product Affected versions Fixed in
Import XML and RSS Feeds 2.1 earliest → < 2.1.4 2.1.4

Other CVEs of Import XML and RSS Feeds

The 2 CVEs of Import XML and RSS Feeds →
CVE-2023-4521 The Import XML and RSS Feeds WordPress plugin before 2.1.5 contains a web shell, allowing unauthenticated attackers to… 9.8 Critical
Track this CVE