CVE-2021-24123

Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images such as the ones from Podcast Artwork section, allowing high privilege accounts admin+ being able to upload arbitrary files, such as php, leading to RCE...

CVE-2021-24123: Unrestricted Upload of File with Dangerous Type

Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images such as the ones from Podcast Artwork section, allowing high privilege accounts admin+ being able to upload arbitrary files, such as php, leading to RCE...

PT-2021-15668

Name of the Vulnerable Software and Affected Versions: PowerPress WordPress plugin versions prior to 8.3.8 Description: The issue allows high privilege accounts admin+ to upload arbitrary files, such as php, due to a lack of verification for some uploaded feed images, like those from the Podcast...