Appointify WordPress Plugin Arbitrary File Upload Vulnerability

A vulnerability allowing unrestricted upload of files with dangerous types has been identified in the Appointify WordPress plugin, versions through 1.0.8. This vulnerability could be exploited to upload a web shell to the web server, potentially allowing further access or control over the website.

Impact

Exploitation of this vulnerability could lead to arbitrary file upload, allowing malicious actors to upload web shells or other types of backdoors that could be executed to gain additional access to the website.

Remediation

Users are advised to remove and replace the Appointify WordPress plugin, as it is likely abandoned and will not receive further updates or fixes.