File Away WordPress Plugin Arbitrary File Upload Vulnerability

A vulnerability in the File Away plugin for WordPress, present in all versions through 3.9.9.0.1, allows for arbitrary file uploads. This issue arises from a lack of capability checks and insufficient file type validation in the plugin's upload function. As a result, unauthenticated attackers can upload arbitrary files to the server, potentially leading to remote code execution.

Impact

Exploitation of this vulnerability could allow for arbitrary file uploads, with the potential for remote code execution on the affected server.

Remediation

No known patch is available. It is recommended to review the vulnerability details and consider uninstalling the affected plugin.