WP Chill Filr Plugin Arbitrary File Upload Vulnerability

A vulnerability allowing unrestricted upload of files with dangerous types has been identified in the WP Chill Filr plugin, specifically in versions through 1.2.12. This vulnerability could be exploited to upload a web shell to the server, potentially leading to unauthorized access or control over the website.

Impact

Exploitation of this vulnerability could allow a malicious actor to upload any type of file to the website, including backdoors that could be executed to gain further access.

Remediation

Patchstack has issued a mitigation rule to block any attacks until an official patch becomes available. Users can activate this mitigation through Patchstack.