CVE-2024-6313 is a critical vulnerability in the Gutenberg Forms – WordPress Form Builder Plugin by nikolaystrikhar, affecting versions up to and including 2.2.9. The issue arises because the plugin's 'upload' function allows users to specify allowed file types without sufficient restriction, enabling unauthenticated attackers to upload arbitrary files. This can potentially lead to remote code execution on the server hosting the vulnerable plugin. The vulnerability is categorized under CWE-434 (Unrestricted Upload of File with Dangerous Type) and has a CVSS 3.1 base score of 9.8, reflecting its high impact on confidentiality, integrity, and availability.

Successful exploitation allows unauthenticated attackers to upload arbitrary files to the server, which may lead to remote code execution. This compromises the confidentiality, integrity, and availability of the affected system. Given the critical CVSS score of 9.8, the impact is severe and could result in full system compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the plugin's upload functionality, disable the plugin if possible, or implement web application firewall (WAF) rules to block malicious upload attempts. Monitor official sources for updates and apply patches promptly once released.