The vulnerability of the `waveplayer_create_local_copy()` function in the WavePlayer plugin of the WordPress content management system allows a hacker to upload arbitrary files and execute arbitrary code.

The vulnerability of the waveplayercreatelocalcopy function in the WordPress content management system’s plugin, WavePlayer, allows for unlimited loading of malicious files. Exploiting this vulnerability enables a remote attacker to load arbitrary files and execute arbitrary code by loading a...