WordPress Automatic Plugin Arbitrary File Upload Vulnerability

A vulnerability allowing arbitrary file uploads has been identified in the WordPress Automatic Plugin, specifically in versions through 3.115.0. This issue arises from inadequate file type validation in the 'core.php' file, enabling authenticated attackers with Author-level access or higher to upload arbitrary files to the server. Such uploads could potentially lead to remote code execution.

Impact

Exploitation of this vulnerability could allow for arbitrary file uploads, which may be used to execute malicious code on the server.

Remediation

Users are advised to update the WordPress Automatic Plugin to version 3.116.0 or a newer patched version.