Mooveagency Import XML And Rss Feeds
3 CVEs affecting Mooveagency Import XML And Rss Feeds. Latest disclosed: 2023-09-25. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-4521 | Critical | 9.8 | 2023-09-25 | The Import XML and RSS Feeds WordPress plugin before 2.1.5 contains a web shell, allowing unauthenticated attackers to perform RCE. The plugin/vendor was not c… |
CVE-2020-24148 | Critical | 9.1 | 2021-07-07 | Server-side request forgery (SSRF) in the Import XML and RSS Feeds (import-xml-feed) plugin 2.0.1 for WordPress via the data parameter in a moove_read_xml acti… |
CVE-2023-4300 | High | 7.2 | 2023-09-25 | The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files, allowing an attacker to upload a malicious PHP f… |