CVE-2023-45603

CRÍTICO 9.8CVE-2023-45603 · Published 20/12/2023 · updated 17/06/2026

Em resumo

CVE-2023-45603 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta user submitted posts (plugin-planet).
Chance de exploração nos próximos 30 dias (EPSS): 0.97%, maior que 62.1% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
user submitted posts plugin-planet	`≤ 20230902`	No fix yet

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Jeff Starr User Submitted Posts – Enable Users to Submit Posts from the Front End.This issue affects User Submitted Posts – Enable Users to Submit Posts from the Front End: from n/a through 20230902.

References

patchstack.com/database/vulnerability/user-submitted-posts/wordpress-user-submitted-posts-plugin-20230902-unauthenticated-arbitrary-file-upload-vulnerability · Third Party Advisory

Mais vulnerabilidades de user submitted posts

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

user submitted posts

plugin-planet

≤ 20230902

No fix yet

Mais vulnerabilidades de user submitted posts

Ver tudo →