User Registration Advanced Fields WordPress Plugin Arbitrary File Upload Vulnerability

A vulnerability allowing arbitrary file uploads has been identified in the User Registration Advanced Fields plugin for WordPress, affecting all versions through 1.6.20. The issue arises from inadequate file type validation in the 'URAF_AJAX::method_upload' function, enabling unauthenticated attackers to upload arbitrary files to the server. This vulnerability could potentially lead to remote code execution, but exploitation requires the addition of a 'Profile Picture' field to the form.

Impact

Exploitation of this vulnerability could allow for arbitrary file uploads, with the potential for remote code execution if the uploaded file is executed on the server.

Remediation

Users are advised to update the User Registration Advanced Fields plugin to version 1.6.21 or a newer patched version.