Threats tagged 'ghsa-jrc6-q6c9-jj82'

The EM Beer Manager plugin for WordPress versions up to and including 3.2.3 contains a vulnerability that allows authenticated users with subscriber-level access or higher to upload arbitrary files, including PHP scripts, due to missing file type validation and authorization checks. This can lead to remote code execution on the affected server if the attacker can supply a mock HTTP server responding with specific JSON data.