Download Plugin WordPress Arbitrary File Upload Vulnerability

A vulnerability allowing arbitrary file uploads has been identified in the Download Plugin for WordPress, affecting all versions through 2.2.8. This issue arises from inadequate file type validation in the 'dpwap_plugin_locInstall' function. As a result, authenticated attackers with Administrator-level access can upload arbitrary files to the server, potentially leading to remote code execution.

Impact

Exploitation of this vulnerability could allow for arbitrary file uploads, which may be used to execute malicious code on the server.

Reproduction

To reproduce this vulnerability, an authenticated user with Administrator privileges can upload files through the plugin's file upload feature. The absence of proper file type validation allows any file type to be uploaded, including potentially harmful files that could be executed on the server.

Remediation

Users are advised to update the Download Plugin to version 2.2.9 or a newer patched version.