Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Moove Agency Component: Import Xml And Rss Feeds Clear all filters
TI-2023-04172 CVE-2023-4521 · GHSA-2j3g-p2x2-c94q

Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE

Priority HIGH 82

The Import XML and RSS Feeds WordPress plugin before 2.1.5 contains a web shell, allowing unauthenticated attackers to perform RCE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.40828 Published 2023-09-25 Fixed in 2.1.5
TI-2023-03976 CVE-2023-4300 · GHSA-5qfc-w62v-vw7j

Import XML and RSS Feeds < 2.1.4 - Admin+ Arbitrary File Upload

Priority HIGH 67

The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files, allowing an attacker to upload a malicious PHP file, leading to Remote Code Execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02042 Published 2023-09-25 Fixed in 2.1.4