CVE-2023-4300 (published 2023-09-25T15:56:51.782Z)
The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files, allowing an attacker to upload a malicious PHP file, leading to Remote Code Execution.
Affected products: Vendor: Unknown
Product: Import XML and RSS Feeds
Versions: 0