CVE-2020-24148

概要

参考情報

• secwx/research · Third Party Advisory
• wordpress.org/plugins/import-xml-feed · Release Notes

import xml and rss feeds のその他の脆弱性

• CVE-2023-4521緊急 9.8The Import XML and RSS Feeds WordPress plugin before 2.1.5 contains a web shell, allowing unauthenticated attackers to perform RCE. The plug…
• CVE-2023-4300高 7.2The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files, allowing an attacker to uploa…