CVE-2021-24123

CVE-2021-24123 affects the PowerPress WordPress plugin prior to version 8.3.8. The vulnerability arises from insufficient verification of certain uploaded feed images (e.g., Podcast Artwork), enabling an authenticated attacker with admin+ privileges to upload arbitrary files (for example PHP file...

CVE-2021-24123 PowerPress < 8.3.8 - Authenticated Arbitrary File Upload leading to RCE

Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images such as the ones from Podcast Artwork section, allowing high privilege accounts admin+ being able to upload arbitrary files, such as php, leading to RCE...