PT-2022-13217

Name of the Vulnerable Software and Affected Versions Sermon Browser WordPress plugin versions 0.45.22 and earlier Description The issue allows attackers to make a logged-in admin upload arbitrary files, such as PHP files, due to the lack of CSRF checks and file validation when uploading Sermon...