Threats tagged 'ghsa-v9cp-82qp-rrj6'

The WP Duplicate WordPress plugin through version 1.1.11 contains a vulnerability where it fails to properly verify request authentication and does not validate the path or type of uploaded files. This flaw allows unauthenticated attackers to write arbitrary files to the server, potentially leading to remote code execution. The vulnerability is actively exploited in the wild.