Threats tagged 'ghsa-6wvw-5jhh-gcg4'

The affiliate-toolkit WordPress plugin up to version 3.9.2 contains an arbitrary file upload vulnerability via its upload_image function. This flaw arises from insufficient validation of file types, allowing authenticated users with contributor-level access or higher to upload potentially executable files. Exploitation requires the 'import product image' option to be enabled, which triggers the vulnerable image download process when saving product posts. Successful exploitation can lead to remote code execution on the affected system.