Read the docs

Recently Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Recently Project records in CISA KEV

No Recently Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Recently 1 record MEDIUM

Records

1 record in Recently · all components

TI-2021-03239 CVE-2021-4382 · GHSA-xrc5-wm9f-xf92

Recently <= 3.0.4 - Arbitrary File Upload to Remote Code Exectution

Priority MEDIUM 43

The Recently plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the fetch_external_image() function in versions up to, and including, 3.0.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0162 Published 2023-06-07 No fix listed CWE-434
Open these records in search →