Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin Import XML and RSS Feeds Remote Code Execution - CVE-2023-4521 - Vulnerability Database
WP Plugin Import Xml Feed

WordPress Plugin Import XML and RSS Feeds Remote Code Execution - CVE-2023-4521

Critical
Reference: CVE-2023-4521
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-4521
Title: WordPress Plugin Import XML and RSS Feeds Remote Code Execution
Overview:

WordPress Plugin Import XML and RSS Feeds is prone to a remote code execution vulnerability because the web shells created as a result of a previously reported issue CVE-2023-4300 are not being deleted when updating to the new version. Successful exploitation may allow attackers to execute arbitrary commands with the privileges of the user running the application to compromise the application or the underlying database to access or modify data or to compromise a vulnerable system. WordPress Plugin Import XML and RSS Feeds version 2.1.4 is vulnerable prior versions may also be affected.