Design/Logic Flaw

The AGIL WordPress plugin through 1.0 accepts all zip files and automatically extracts the zip file without validating the extracted file type. Allowing high privilege users such as admin to upload an arbitrary file like PHP, leading to RCE...

CVE-2021-25119

CVE-2021-25119 affects the AGIL WordPress plugin up to version 1.0. The vulnerability stems from the plugin accepting all ZIP files and extracting them without validating the extracted file types, allowing an admin-level user to upload PHP or other arbitrary files and potentially achieve remote c...

WordPress AGIL plugin <= 1.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Chuang LI in WordPress AGIL plugin versions = 1.0. Solution Deactivate and delete. This plugin has been closed as of March 31, 2022 and is not available for download. This closure is temporary, pending a full review...