Threats tagged 'ghsa-xwg6-8rwf-j275'

The Ultimate Addons for Elementor Forms WordPress plugin versions before 1.0.8 contain a vulnerability where the plugin does not properly validate the file extension of uploaded files. This flaw allows unauthenticated users to upload arbitrary files, including PHP scripts, potentially leading to remote code execution on the affected system.