Threats tagged 'ghsa-3j45-2638-6g5h'

The Project Manager plugin for WordPress versions up to 4.1.1 contains a critical remote code execution vulnerability via the 'id' parameter. This flaw arises because the 'id' parameter is unsanitized and directly concatenated into a validation rule string, which is then split and each token executed as a dynamic PHP function without an allowlist. Due to the way WordPress processes REST API routes, the authorization check is bypassed, allowing unauthenticated attackers to execute arbitrary code on the server.