CVE-2024-5080 WP eMember < 10.6.6 - Admin+ Arbitrary File Upload

The wp-eMember WordPress plugin before 10.6.6 does not validate files to be uploaded, which could allow admins to upload arbitrary files such as PHP on the server...

CVE-2024-5080

The wp-eMember WordPress plugin (versions prior to 10.6.6 ) is vulnerable to an arbitrary file upload vulnerability due to a failure to validate files during the upload process. This flaw allows administrators to upload arbitrary files, such as PHP scripts, onto the server. To mitigate this risk,...

CVE-2024-5080 WP eMember < 10.6.6 - Admin+ Arbitrary File Upload

The wp-eMember WordPress plugin before 10.6.6 does not validate files to be uploaded, which could allow admins to upload arbitrary files such as PHP on the server...