BerqWP WordPress Plugin Arbitrary File Upload Vulnerability

A vulnerability allowing arbitrary file uploads has been identified in the BerqWP WordPress plugin, specifically in the 'store_javascript_cache.php' file. This issue affects all versions of the plugin up to and including 2.2.42. The vulnerability arises from inadequate file type validation, enabling unauthenticated attackers to upload arbitrary files to the affected site's server, potentially leading to remote code execution.

Impact

Exploitation of this vulnerability could allow for arbitrary file uploads, with the potential for remote code execution on the affected server.

Remediation

Users are advised to update the BerqWP WordPress plugin to version 2.2.44 or a newer patched version.