CVE-2015-10138

The CVE-2015-10138 entry concerns the WordPress plugin Work The Flow File Upload (versions ≤ 2.5.2). The issue is lack of file type validation in the jQuery-File-Upload-9.5.0 server (and test files), enabling unauthenticated arbitrary file uploads on affected servers and potentially remote code e...