CVE-2024-49326 WordPress Affiliator plugin <= 2.1.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Vasilis Kerasiotis Affiliator allows Upload a Web Shell to a Web Server.This issue affects Affiliator: from n/a through 2.1.3...

WordPress Affiliator Plugin <= 2.1.3 is vulnerable to Arbitrary File Upload

Software Affiliator Type Plugin Vulnerable versions = 2.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-49326 Patch priority High CVSS severity High 10 Developer Claim ownership PSID bed59e49a030 Credits João Pedro S Alcântara Kinorth Required privile...