FantasticPlugins SUMO Affiliates Pro Unrestricted File Upload Vulnerability

A vulnerability allowing unrestricted file uploads has been identified in the FantasticPlugins SUMO Affiliates Pro WordPress plugin, affecting versions through 10.7.0. This vulnerability could be exploited to upload malicious files, potentially leading to further access or control over the website.

Impact

Exploitation of this vulnerability could allow for arbitrary file uploads, including the possibility of uploading backdoors that could be executed to gain additional access to the website.

Remediation

Users are advised to update to a version of SUMO Affiliates Pro later than 10.7.0. For those unable to update immediately, Patchstack offers a virtual patch that blocks attacks targeting this vulnerability.