Unrestricted Upload of File with Dangerous Type vulnerability

CVE-2024-31377

Summary

The vulnerability in WP Photo Album Plus, developed by J.N. Breetvelt, allows for unrestricted file uploads of potentially dangerous file types. This flaw, present in versions up to 8.7.01.001, opens the door for attackers to upload malicious files to the server, which can lead to unauthorized access and exploitation of the affected system. The lack of proper file type validation puts users at risk, making it imperative for organizations using this plugin to address the vulnerability promptly to safeguard their websites and data.

References