Skip to content
OpenAdvisories
Critical · 9.0 CVE-2023-45603 EUVD-2023-49895GHSA-4v55-6j3q-q3g7

WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload

Published Dec 20, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Jeff Starr Product: User Submitted Posts – Enable Users to Submit Posts from the Front End

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Jeff Starr User Submitted Posts – Enable Users to Submit Posts from the Front End.This issue affects User Submitted Posts – Enable Users to Submit Posts from the Front End: from n/a through 20230902.

Affected products

VendorProductAffectedFixed
Jeff Starr User Submitted Posts – Enable Users to Submit Posts from the Front End ≤ 20230902 —

References