2025-01-08 07:18:38
Wordfence
PUBLISHED
The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.12 via the wfu_ABSPATH cookie parameter. This makes it possible for unauthenticated attackers to execute code on the server.