CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in xaraartech External featured image from bing external-featured-image-from-bing allows Upload a Web Shell to a Web Server.This issue affects External featured image from bing: from n/a through <= 1.0.2.
Explanation of Vulnerability in Simple Terms
The External Featured Image from Bing plugin for WordPress contains an unrestricted file upload vulnerability in versions up to 1.0.2. An authenticated user with low privileges can upload arbitrary files to the server without validation, potentially gaining control over the site. The vulnerability affects confidentiality, integrity, and availability of the entire WordPress installation.
What an attacker can do
Upload arbitrary files to the server and execute code on the site.
Potential impact on your site
An attacker with basic user access can compromise your entire WordPress site, steal data, modify content, or take it offline.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., contributor or subscriber role).
Key dates
External resources
Related vulnerabilities
