CVE-2024-6366

The User Profile Builder WordPress plugin (versions before 3.11.8 ) is vulnerable to unauthenticated media upload due to a lack of proper authorization. Attackers can exploit the plugin's async upload functionality to upload arbitrary media files, which may be used to host malicious content or ac...