CVE-2024-6366

The User Profile Builder WordPress plugin (versions before 3.11.8 ) contains an unauthenticated media upload vulnerability due to a lack of proper authorization in its async upload functionality . This flaw allows attackers to upload arbitrary media files, which can be leveraged to upload and exe...