PT-2020-15865

Name of the Vulnerable Software and Affected Versions Autoptimize Wordpress Plugin version 2.7.6 Description The issue arises from the ao ccss import AJAX call, which fails to verify if the uploaded file is a legitimate Zip file. This allows high-privilege users to upload arbitrary files, includi...