Threats tagged 'ghsa-wjww-5gvr-r96j'

The SimpleForm WordPress plugin up to version 3.10.2 contains an arbitrary file upload vulnerability via its handle_upload function. This flaw allows unauthenticated attackers to upload potentially executable files by bypassing extension and MIME type validation using trailing-dot filenames. The vulnerability arises from missing server-side file key allowlisting and inadequate pre-sanitization. Exploitation could lead to remote code execution. The nonce used for access control is publicly available in form shortcodes, making unauthorized exploitation trivial.