The Advanced Uploader WordPress plugin up to and including 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to RCE
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
advanced uploader project advanced uploader |