CVE-2021-24254

The CVE-2021-24254 entry concerns WordPress College publisher Import plugin (versions ≤ 0.1). The vulnerability stems from the plugin not validating the uploaded CSV for import, enabling high-privilege users to upload arbitrary files (e.g., PHP), which can lead to remote code execution (RCE). A C...