plugin
9 known security issues reported for the Recently WordPress plugin. Most recent disclosed Jun 7, 2023.
Running Recently on your site? Check whether your installed version is affected.
Scan your site free[en] The Recently plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the fetch_external_image() function in versions up to, and including, 3.0.4. This makes it possible for authenticated attackers to upload arbitrary files on the affected site's server which may make rem...
The Recently plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the fetch_external_image() function in versions up to, and including, 3.0.4. This makes it possible for authenticated attackers to upload arbitrary files on the affected site's server which may make remote c...
The Recently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘upload_thumb_src’ parameter in versions up to, and including, 3.0.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will...
Authenticated Code Injection vulnerability discovered by Jerome Bruandet (NinTechNet) in WordPress Recently plugin (versions <= 3.0.4).
Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by Yu Iwama of Secure Sky Technology Inc. and the JPCERT/CC Vulnerability Coordination Group in WordPress Recently plugin (versions <= 3.0.4).
The Recently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘upload_thumb_src’ parameter in versions up to, and including, 3.0.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will...
The Recently plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the fetch_external_image() function in versions up to, and including, 3.0.4. This makes it possible for authenticated attackers to upload arbitrary files on the affected site's server which may make remote c...
Jerome Bruandet from NinTechNet discovered a code injection issue in the plugin before 3.0.5
The plugin did not properly sanitise or escape its default Thumbnail setting before outputting back in the page, leading to a stored Cross-Site Scripting issue
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free