CVE-2021-4382

The Recently plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the fetchexternalimage function in versions up to, and including, 3.0.4. This makes it possible for authenticated attackers to upload arbitrary files on the affected site's server whic...

WordPress Plugin Recently 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

PT-2023-12494 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: Recently plugin for WordPress versions up to, and including, 3.0.4 Description: The issue arises from missing file type validation in the fetch external image function, allowing authenticated attackers to upload arbitrary files on the server,...