The vulnerability of the svg-vector-icon-plugin (WP SVG Icons) plugin for WordPress content management systems allows a hacker to upload a arbitrary ZIP archive (containing a.php file).

The vulnerability of the svg-vector-icon-plugin WP SVG Icons plugin for WordPress lies in insufficient validation of the requests being made. Exploiting this vulnerability could allow a malicious actor to download a arbitrary ZIP archive containing a.php file remotely...