Unlimited Addons for WPBakery Page Builder <= 1.0.42 - Authenticated (Editor+) Arbitrary File Upload
highThe Unlimited Addons for WPBakery Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'importZipFile' function in versions up to, and including, 1.0.42. This makes it possible for authenticated attackers with a role that the administrator previously...
- CVSS:
- 7.2
- Affected:
- up to 1.0.42
- Fix:
- No patched version reported
- Disclosed:
- Jan 17, 2024