WordPress Cherry < 1.2.7 - Unauthenticated Arbitrary File Upload and Download Detection

WordPress plugin Cherry 1.2.7 has a vulnerability which enables an attacker to upload files directly to the server. This could result in attacker uploading backdoor shell scripts or downloading the wp-config.php file. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin Cherry 1.""" from...