Aller au contenu
Se connecter
7.2 Élevée

CVE-2023-4300 The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files,…

Description

The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files, allowing an attacker to upload a malicious PHP file, leading to Remote Code Execution.

Produits et versions touchés

Produit Versions touchées Corrigé en
Import XML and RSS Feeds 2.1 premières → < 2.1.4 2.1.4

Autres CVE de Import XML and RSS Feeds

Les 2 CVE de Import XML and RSS Feeds →
CVE-2023-4521 The Import XML and RSS Feeds WordPress plugin before 2.1.5 contains a web shell, allowing unauthenticated attackers to… 9.8 Critique
Suivre cette CVE