WordPress Front End Users Plugin Arbitrary File Upload Vulnerability

A vulnerability allowing arbitrary file uploads has been identified in the Front End Users plugin for WordPress, affecting all versions through 3.2.32. The issue arises from inadequate file type validation in the file upload section of the registration form. This flaw enables unauthenticated attackers to upload arbitrary files to the server, potentially leading to remote code execution.

Impact

Exploitation of this vulnerability could allow for arbitrary file uploads, with the possibility of executing uploaded files on the server, depending on the file type and execution permissions.

Remediation

No known patch is available. It is recommended to review the vulnerability details and consider uninstalling the affected plugin.