CVE-2015-10137

The CVE-2015-10137 entry concerns the WordPress plugin “Website Contact Form With File Upload” with vulnerabilities up to version 1.3.4, caused by missing file type validation in upload_file(); this allows unauthenticated arbitrary file uploads on affected servers and may enable remote code execu...