CVE-2023-45603: WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload

Q: What is the severity of CVE-2023-45603?

CVE-2023-45603 has a high severity rating due to the potential for unrestricted file uploads.

Q: How do I fix CVE-2023-45603?

To fix CVE-2023-45603, update the User Submitted Posts plugin to version 20230902 or later.

Q: What impact does CVE-2023-45603 have on my website?

CVE-2023-45603 allows attackers to upload malicious files to your website, which can lead to compromise.

Q: Who is affected by CVE-2023-45603?

Users of the User Submitted Posts plugin prior to version 20230902 are vulnerable to CVE-2023-45603.

Q: Is CVE-2023-45603 an authenticated or unauthenticated vulnerability?

CVE-2023-45603 is an unauthenticated vulnerability, allowing attackers to exploit it without authentication.

Published Dec 20, 2023

Updated

Unrestricted Upload of File with Dangerous Type vulnerability in Jeff Starr User Submitted Posts – Enable Users to Submit Posts from the Front End.This issue affects User Submitted Posts – Enable Users to Submit Posts from the Front End: from n/a through 20230902.

Affected Software

1 affected component

Plugin-planet User Submitted Posts Wordpress<=20230902

Remediation

Information

Update to 20230914 or a higher version.

Event History

Dec 20, 2023

CVE Published

via MITRE·06:38 PM

Data Sourced

via MITRE·06:38 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-45603?

CVE-2023-45603 has a high severity rating due to the potential for unrestricted file uploads.

How do I fix CVE-2023-45603?