Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-69718
HistoryJun 14, 2023 - 12:00 a.m.

WordPress Plugin User Submitted Posts Arbitrary File Upload Vulnerability

2023-06-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
wordpress
plugin
arbitrary file upload
vulnerability
php
mysql
validation
exploit
malicious files
arbitrary code

0.01 Low

EPSS

Percentile

83.5%

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. An arbitrary file upload vulnerability exists in the WordPress plugin User Submitted Posts, which is caused by incorrect validation of file extensions by the usp_check_images function. An attacker can exploit this vulnerability to upload malicious files and execute arbitrary code on a vulnerable system.

0.01 Low

EPSS

Percentile

83.5%

Related for CNVD-2023-69718