Gravity Forms WordPress Plugin Unauthenticated Arbitrary File Upload Vulnerability

A vulnerability in the Gravity Forms plugin for WordPress allows for arbitrary file uploads. This issue arises from inadequate file type validation in the 'copy_post_image()' function, affecting all versions up to and including 2.9.20. The vulnerability enables unauthenticated attackers to upload arbitrary files to the server of the affected site, potentially leading to remote code execution. This issue only impacts sites with 'allow_url_fopen' enabled, the post creation form active, and a file upload field included in the form.

Impact

Exploitation of this vulnerability could result in unauthorized file uploads, with the potential for remote code execution on the affected server.

Remediation

Users are advised to update the Gravity Forms plugin to version 2.9.21 or a newer patched version.