WordPress WPJAM Basic Plugin Arbitrary File Upload Vulnerability

A vulnerability allowing unrestricted upload of files with dangerous types has been identified in the WordPress WPJAM Basic plugin, affecting versions through 6.9.2. This vulnerability could be exploited to upload malicious files, such as backdoors, which could then be executed to gain further access to the website.

Impact

Exploitation of this vulnerability could lead to arbitrary file upload, allowing attackers to upload and execute malicious files on the server.

Remediation

Users of the WPJAM Basic WordPress plugin should update to version 6.9.2.1 or later. Patchstack users can enable auto-update for vulnerable plugins.