Import Xml And Rss Feeds
Approved changes feed: RSS · Atom
cpe:2.3:a:mooveagency:import_xml_and_rss_feeds:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Mooveagency (66d45549-b48c-54ca-96f0-eb5610771b3a) |
|---|---|
| Product | Import Xml And Rss Feeds (f3e38499-c0fb-5491-aa28-ac1fa1919bdd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4521 |
vulnerable | 2026-06-08 06:16:12.883450 |
Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE
The Import XML and RSS Feeds WordPress plugin before 2.1.5 contains a web shell, allowing unauthenticated attackers to perform RCE. The plugin/vendor was not compromised and the files are the result of running a PoC for a previously reported issue (https://wpscan.com/vulnerability/d4220025-2272-4d5f-9703-4b2ac4a51c42) and not deleting the created files when releasing the new version.
Published: 2023-09-25T15:56:53.965Z
Updated: 2025-04-23T16:15:47.593Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4300 |
vulnerable | 2026-06-08 06:16:12.083580 |
Import XML and RSS Feeds < 2.1.4 - Admin+ Arbitrary File Upload
The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files, allowing an attacker to upload a malicious PHP file, leading to Remote Code Execution.
Published: 2023-09-25T15:56:51.782Z
Updated: 2025-04-23T16:16:07.209Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.