WordPress Atarim plugin <= 5.1.1 - Authenticated (Author+) Arbitrary File Deletion via '_wp_attached_file' Meta vulnerability

Authenticated Author+ Arbitrary File Deletion via 'wpattachedfile' Meta vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Atarim versions = 5.1.1...

Arbitrary Code Execution

wordpress is vulnerable to arbitrary code execution. The vulnerability exists in the wpattachedfile post meta entry when a user with author privilege passes a malicious image with exif metadata causing the Post Meta entry to change to an arbitrary substring such as a .jpg?file.php...

CVE-2019-8942: Unrestricted Upload of File with Dangerous Type

WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an wpattachedfile Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring. An attacker with author privileges can execute arbitrary code by uploading a crafted image...