Threats tagged 'ghsa-v8wh-4xxv-rwqj'

The Interactive Real Estate – Floor Plan & Building Visualizer plugin for WordPress contains an arbitrary file upload vulnerability in all versions up to and including 2.6.0. The flaw arises from missing capability checks, nonce verification, and file extension or MIME type validation in the extract_zip_data function. Authenticated users with subscriber-level access or higher can exploit this vulnerability to upload potentially executable files, enabling remote code execution. Exploitation requires the plugin's Freemius Premium license or trial to be active, as the vulnerability is gated by a site-level license check rather than per-user capability checks.