CVE-2023-4300

Name of the Vulnerable Software and Affected Versions Import XML and RSS Feeds WordPress plugin versions prior to 2.1.4

Description The issue allows an attacker to upload a malicious PHP file due to a lack of file extension filtering for uploaded files, leading to Remote Code Execution.

Recommendations For versions prior to 2.1.4, update to version 2.1.4 or later to resolve the issue. As a temporary workaround, consider restricting file uploads to prevent potential exploitation until the update is applied.