Upload Media By Url

upload_media_by_url

Vendor: Notetoservices • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2023-3720

1Notetoservices

1Upload Media By Url

Jun 17, 2026

Aug 30, 2023

N/A· v4

6.5 MEDIUM· v3

N/A· v2

The Upload Media By URL WordPress plugin before 1.0.8 does not have CSRF check when uploading files, which could allow attackers to make logged in admins upload files (including HTML containing JS code for users with the...Show more