Threats tagged 'ghsa-356m-cxhj-j59p'

The Pie Register Premium WordPress plugin up to version 3.8.4.0 contains an unrestricted file upload vulnerability via the piereg_file_upload function. The plugin fails to properly verify file type validation results before saving uploaded files and lacks nonce or capability checks on the AJAX handler. This allows unauthenticated attackers to upload and execute malicious files such as PHP scripts, enabling remote code execution. The server response reveals the uploaded file's path, facilitating exploitation.