Threats tagged 'ghsa-wq7f-wxg4-cf5j'

The Smart Auto Upload Images plugin for WordPress contains a vulnerability in its auto-image creation functionality that allows authenticated users with Contributor-level access or higher to upload arbitrary files due to missing file type validation. This vulnerability affects all versions up to and including 1.2.0 and may enable remote code execution on the affected server.