CVE-2023-7082 WP All Import < 3.7.3 - Admin+ Arbitrary File Upload to RCE
Administrators can upload malicious zip files that are extracted to public directories, enabling remote code execution in the WP All Import plugin.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-7082?
CVE-2023-7082 is a high-severity vulnerability in Unknown Import any XML or CSV File to WordPress, published on 22 Jan 2024. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The Import any XML or CSV File to WordPress plugin before 3.7.3 accepts all zip files and automatically extracts the zip file into a publicly accessible directory without sufficiently validating the extracted file type. This may allows high privilege users such as administrator to upload an executable file type leading to remote code execution.
Which versions are affected by CVE-2023-7082?
It affects 1 product.
Products include Soflyy Export Any Wordpress Data to Xml\/Csv.
How do I fix CVE-2023-7082?
No fix has been published for CVE-2023-7082 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-7082 being exploited?
There is no known exploitation of CVE-2023-7082 in the wild and no public exploit code.
Other vulnerabilities in Unknown Import any XML or CSV File to WordPress
- CVE-2023-5882 WP All Export (Free < 1.4.1, Pro < 1.8.6) - Remote Code Execution via CSRF
- CVE-2023-5886 WP All Export (Free < 1.4.1, Pro < 1.8.6) - Author+ PHAR Deserialization via CSRF
- CVE-2023-4724 WP All Export (Free < 1.4.0, Pro < 1.8.6) - Admin+ RCE
- CVE-2022-1800 Export any WordPress data to XML/CSV < 1.3.5 - Admin+ SQL Injection
Sources
Also known as GHSA-p3c5-46w2-82qj.