CVE-2023-45603

CRITICAL

Plugin-planet User Submitted Posts - Unrestricted File Upload

Title source: rule

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Jeff Starr User Submitted Posts – Enable Users to Submit Posts from the Front End.This issue affects User Submitted Posts – Enable Users to Submit Posts from the Front End: from n/a through 20230902.

Exploits (1)

inthewild

poc

https://github.com/codeb0ss/cve-2023-45603-poc

View on inthewild

References (1)

[Third Party Advisory] https://patchstack.com/database/vulnerability/user-submitted-posts/wordpress-user-submitted-posts-plugin-20230902-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve

Scores

CVSS v3 9.0

EPSS 0.0216

EPSS Percentile 84.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Details

CWE

CWE-434

Status published

Products (1)

plugin-planet/user_submitted_posts < 20230902

Published Dec 20, 2023

Tracked Since Feb 18, 2026