CVE-2023-45603: WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrar

WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload

Status

Published

2023-12-20

Updated

2026-04-28

Assigning organization

Patchstack

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Jeff Starr User Submitted Posts – Enable Users to Submit Posts from the Front End.This issue affects User Submitted Posts – Enable Users to Submit Posts from the Front End: from n/a through 20230902.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Jeff Starr User Submitted Posts – Enable Users to Submit Posts from the Front End

Default version status: unaffected

n/a to ≤ 20230902affected

References

https://patchstack.com/database/vulnerability/user-submitted-posts/wordpress-user-submitted-posts-plugin-20230902-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve ↗