Threats tagged 'ghsa-qpfm-wcw2-8hxv'

The WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) for WordPress contains a vulnerability allowing arbitrary file uploads via CSV recipe imports in all versions up to and including 1.9.0. An attacker with Contributor-level permissions can upload a malicious PHP file by specifying a remote URL during the import process, potentially leading to remote code execution.