Innovative Solutions User Files Plugin Arbitrary File Upload Vulnerability

A vulnerability allowing unrestricted upload of files with dangerous types has been identified in the Innovative Solutions User Files WordPress plugin, affecting versions through 2.4.2. This vulnerability could be exploited to upload a web shell to the server, potentially leading to unauthorized access or control over the website.

Impact

Exploitation of this vulnerability allows for arbitrary file upload, which could include uploading web shells or backdoors that are executed to gain further access to the website.

Remediation

Users of the Innovative Solutions User Files WordPress plugin are advised to update to version 2.4.2 or later. Patchstack has issued a virtual patch to block attacks targeting this vulnerability until an official fix can be applied.