← Back

Notetoservices

notetoservices

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Upload Media By Url
upload_media_by_url
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-3720
1Notetoservices
1Upload Media By Url
Jun 17, 2026
Aug 30, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The Upload Media By URL WordPress plugin before 1.0.8 does not have CSRF check when uploading files, which could allow attackers to make logged in admins upload files (including HTML containing JS code for users with the...Show more
The Upload Media By URL WordPress plugin before 1.0.8 does not have CSRF check when uploading files, which could allow attackers to make logged in admins upload files (including HTML containing JS code for users with the unfiltered_html capability) on their behalf.Show less