Skip to content
OpenAdvisories
Critical · 9.9 CVE-2024-48027 EUVD-2024-42899GHSA-cf97-87xx-c9w4

WordPress External featured image from bing plugin <= 1.0.2 - Remote Code Execution (RCE) vulnerability

Published Oct 16, 2024 · Updated May 12, 2026 · Assigned by Patchstack

Description

Unrestricted Upload of File with Dangerous Type vulnerability in xaraartech External featured image from bing external-featured-image-from-bing allows Upload a Web Shell to a Web Server.This issue affects External featured image from bing: from n/a through <= 1.0.2.

Affected products

VendorProductAffectedFixed
xaraartech External featured image from bing ≤ 1.0.2 —

References