CVE-2021-4382

The Recently plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the fetch_external_image() function in versions up to, and including, 3.0.4. This makes it possible for authenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

• CWE-434
• CWE-434

• https://plugins.trac.wordpress.org/changeset/2542693Release Notes
• https://wpscan.com/vulnerability/92c3f26a-1a84-459a-874b-07dc83c9f42aThird Party Advisory
• https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-recently-multiple-vulnerabilities-3-0-4/Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/f8297149-2de3-4e49-80f9-6ea59dea6bce?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/changeset/2542693Release Notes
• https://wpscan.com/vulnerability/92c3f26a-1a84-459a-874b-07dc83c9f42aThird Party Advisory
• https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-recently-multiple-vulnerabilities-3-0-4/Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/f8297149-2de3-4e49-80f9-6ea59dea6bce?source=cveThird Party Advisory

Published

Jun 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43814Rizin is a UNIX-like reverse engineering framework and comma…7.8
• CVE-2021-43815Grafana is an open-source platform for monitoring and observ…4.3
• CVE-2021-43816containerd is an open source container runtime. On installat…9.1
• CVE-2021-43817Collabora Online is a collaborative online office suite base…6.1
• CVE-2021-43818lxml is a library for processing XML and HTML in the Python …7.1
• CVE-2021-43819Stargate-Bukkit is a mod for the minecraft video game which …5.3
• CVE-2021-43820Seafile is an open source cloud storage system. A sync token…5.9
• CVE-2021-43821Opencast is an Open Source Lecture Capture & Video Managemen…7.7
• CVE-2021-43822Jackalope Doctrine-DBAL is an implementation of the PHP Cont…7.5
• CVE-2021-43823Sourcegraph is a code search and navigation engine. Sourcegr…6.5
• CVE-2021-43824Envoy is an open source edge and service proxy, designed for…7.5
• CVE-2021-43825Envoy is an open source edge and service proxy, designed for…7.5