CVE-2023-34007 WordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.3...

CVE-2023-34007

The CVE-2023-34007 entry concerns the WPChill WordPress Download Monitor plugin. Affected software is WordPress Download Monitor plugin versions

WordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload

Software Download Monitor Type Plugin Vulnerable versions = 4.8.3 Fixed in 4.8.4 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2023-34007 Patch priority High CVSS severity High 9.9 Developer WPChill PSID f976c6a5bcd4 Credits Nguyen Anh Tien Required privilege Subscriber...