Skip to content
OpenAdvisories

Vendor

hcabrera

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.3

    WordPress Popular Posts <= 7.1.0 - Unauthenticated Arbitrary Shortcode Execution

    The The WordPress Popular Posts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.1.0. This is due to the software allowing users to execute an action that does not properly validate a value before run…

  • High 8.8

    Recently <= 3.0.4 - Arbitrary File Upload to Remote Code Exectution

    The Recently plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the fetch_external_image() function in versions up to, and including, 3.0.4. This makes it possible for authenticated attackers to upload arbitrar…