WordPress Featured Image via URL Plugin Arbitrary File Upload Vulnerability
Vulnerability
A vulnerability allowing arbitrary file uploads has been identified in the Featured Image via URL plugin for WordPress, affecting all versions through 0.1. This issue arises from a lack of proper file type validation, enabling authenticated attackers with Contributor-level access and above to upload arbitrary files to the server. Such uploads could potentially lead to remote code execution.
Impact
Exploitation of this vulnerability could allow for arbitrary file uploads, which may be used to execute malicious code on the server.
Remediation
No known patch is available. It is recommended to uninstall the affected plugin and find a replacement.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.