📄 WordPress ActiveDEMAND 0.2.40 Unauthenticated Shell Upload

WordPress ActiveDEMAND plugin version 0.2.40 contains an unauthenticated arbitrary file upload to remote code execution vulnerability. A remote attacker can upload executable PHP code and achieve remote code execution. This proof of concept exploit demonstrates the vulnerable request flow against...