High severity7.2NVD Advisory· Published Jan 22, 2024· Updated Jun 17, 2026
CVE-2023-7082
CVE-2023-7082
Description
The Import any XML or CSV File to WordPress plugin before 3.7.3 accepts all zip files and automatically extracts the zip file into a publicly accessible directory without sufficiently validating the extracted file type. This may allows high privilege users such as administrator to upload an executable file type leading to remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<3.7.3+ 1 more
- (no CPE)range: <3.7.3
- (no CPE)range: <3.7.3
- cpe:2.3:a:soflyy:export_any_wordpress_data_to_xml\/csv:*:*:*:*:*:wordpress:*:*Range: <3.7.3
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/7f947305-7a72-4c59-9ae8-193f437fd04e/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.