PT-2025-3865 · WordPress · Groundhogg

Name of the Vulnerable Software and Affected Versions: Groundhogg plugin for WordPress versions up to, and including, 3.7.3.5 Description: The issue is related to the lack of file type validation in the gh big file upload function, which allows authenticated attackers with Author-level access and...

WordPress Groundhogg plugin <= 3.7.3.5 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Function vulnerability

Authenticated Author+ Arbitrary File Upload via ghbigfileupload Function vulnerability discovered by wesley wcraft in WordPress Plugin Groundhogg versions = 3.7.3.5...