WordPress Portfolleo Plugin <= 1.2 is vulnerable to Arbitrary File Upload

Software Portfolleo Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-49653 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 8f930c167ec6 Credits stealthcopter Required privilege Subscriber...