CVE-2023-7082

Summary

CVE-2023-7082 is a critical vulnerability affecting the Import any XML or CSV File to WordPress plugin before version 3.7.3. This issue permits high privilege users, including administrators, to upload executable files by exploiting the plugin's failure to validate file types properly. The plugin extracts all zip files automatically into a publicly accessible directory, making it susceptible to remote code execution attacks. Users are strongly advised to upgrade to the latest plugin version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.