Arbitrary File Uploads Vulnerability Affects Brizy Page Builder Plugin

CVE-2024-1311

Summary

The Brizy Page Builder plugin for WordPress is susceptible to an arbitrary file upload vulnerability stemming from inadequate validation of file types in the storeImages function. This flaw affects all versions up to and including 2.4.40. Authenticated attackers with contributor access or higher can exploit this vulnerability to upload arbitrary files to the server hosting the affected site. Such breaches can result in remote code execution, posing a significant risk to the integrity and security of the web application.

References