Threats tagged 'ghsa-7rvf-4g93-mh6x'

The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress contains a critical vulnerability in the set_featured_image_from_external_url() function allowing unauthenticated attackers to upload arbitrary files. This affects all versions up to and including 1.1.32. Exploitation could lead to remote code execution if unauthenticated users can add featured images and trigger the vulnerable workflow.