CVE-2023-45603

CVE-2023-45603 concerns the WordPress plugin User Submitted Posts (Jeff Starr) with an Unrestricted Upload of File with Dangerous Type, enabling unauthenticated users to upload arbitrary files via the usp_attach_images path. Public sources (NVD/Wordfence, Patchstack) identify this as a high-sever...

CVE-2019-25138

The CVE-2019-25138 entry concerns the WordPress plugin “User Submitted Posts.” Affected component: usp_check_images, vulnerable through missing file type validation in versions up to and including 20190312. Impact: unauthenticated attackers can upload arbitrary files to the server, with potential...