Threats tagged 'ghsa-gwhh-3rfp-872r'

A vulnerability in the Workeera WordPress plugin before version 1.0.6 allows users with subscriber-level roles to upload arbitrary files without proper validation. This unrestricted file upload can lead to remote code execution by placing malicious files in publicly accessible directories.