Threats tagged 'ghsa-mhrf-qjwq-4j74'

The WP Libre Form WordPress plugin version 1.5.0.1 contains a vulnerability where it does not validate the type of files uploaded through its form submissions. This flaw allows unauthenticated attackers to upload PHP files to locations accessible via the web and execute them, resulting in remote code execution.