WordPress Plugin Vulnerabilities

TerraClassifieds <= 2.0.3 Unauthenticated Arbitrary File Upload

Description

The TerraClassifieds – Simple Classifieds Plugin plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 2.0.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

Affects Plugins

Plugin icon
terraclassifieds
No known fix

References

CVE
CVE-2023-51473
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/b0399b60-6e40-4f35-985f-845a32f69d64

Miscellaneous

Original Researcher
Rafie Muhammad
Verified
No
WPVDB ID
bc9d29b4-7855-4e05-822c-d0f751f870a3

Timeline

Publicly Published
2023-12-27 (about 2 years ago)
Added
2024-01-05 (about 2 years ago)
Last Updated
2024-01-22 (about 2 years ago)

Other

Published
Title
Published
2021-06-28
Title
SP Project & Document Manager < 4.24 - Subscriber+ Shell Upload
Published
2022-12-05
Title
Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload
Published
2025-08-15
Title
School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload
Published
2024-10-17
Title
photokit <= 1.0 - Unauthenticated Arbitrary File Upload
Published
2025-06-10
Title
WooCommerce Designer Pro <= 1.9.24 - Unauthenticated Arbitrary File Upload