Lucene search
PRIOn knowledge basePRION:CVE-2023-4521HistorySep 25, 2023 - 4:15 p.m.
Code injection
2023-09-2516:15:00
PRIOn knowledge base
www.prio-n.com
7
code injection
import xml and rss feeds
wordpress
rce
unauthenticated
vulnerability
web shell
poc
nvd
The Import XML and RSS Feeds WordPress plugin before 2.1.5 contains a web shell, allowing unauthenticated attackers to perform RCE. The plugin/vendor was not compromised and the files are the result of running a PoC for a previously reported issue (https://wpscan.com/vulnerability/d4220025-2272-4d5f-9703-4b2ac4a51c42) and not deleting the created files when releasing the new version.
| CPE | Name | Operator | Version |
|---|---|---|---|
| import_xml_and_rss_feeds | lt | 2.1.5 |
Related
cve
cve
CVE-2023-4521
2023-09-25 16:15:15
wpvulndb
wpvulndb
Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE
2023-08-30 00:00:00
wpexploit
wpexploit
Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE
2023-08-30 00:00:00
cvelist
cvelist
CVE-2023-4521 Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE
2023-09-25 15:56:53
nuclei
nuclei
Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE
2024-05-06 06:29:20
nvd
nvd
CVE-2023-4521
2023-09-25 16:15:15
wordfence
wordfence