CVE-2021-24236

The CVE-2021-24236 exists in the WordPress Imagements plugin up to version 1.2.5. The vulnerability stems from permissive file validation: the plugin only checks the Content-Type and allows uploading files with a PHP filename and code, enabling unauthenticated arbitrary file uploads and remote co...