The User Registration WordPress plugin prior to 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX action available to both unauthenticated and authenticated users, which could allow unauthenticated users to upload PHP files for example.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
wpeverest user registration |