Arbitrary File Upload Vulnerability in Smart Product Review Plugin for WordPress

CVE-2021-4455

What is CVE-2021-4455?

The Smart Product Review Plugin for WordPress allows unauthenticated users to upload arbitrary files due to a lack of proper file type validation. This vulnerability affects all versions up to and including 1.0.4. Attackers can exploit this weakness to upload malicious files, potentially leading to remote code execution on the server and compromising the affected site. It is crucial for users of the plugin to update to the latest version and implement security measures to mitigate the risks associated with this vulnerability.

References