Threats tagged 'ghsa-cc9f-29gq-5x7c'

The wp-downloadmanager WordPress plugin version 1.68.11 (and the 6.9.4 release line) contains a vulnerability that allows an admin-privileged user to upload arbitrary files without any file type or extension validation. The upload handler lacks checks for file type, extension, and directory traversal, enabling an attacker to place executable PHP files in a web-accessible directory, leading to remote code execution. Subsequent plugin versions 1.69 and 1.69.1 introduced file-type validation and directory traversal protections, respectively.