Description
In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into uploading a zip archive containing malicious PHP files. The attacker could then access those files to achieve remote code execution and further infect the targeted site.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ExpressTech Responsive Menu – Create Mobile-Friendly Menu
4.0.4 to < 4.0.4affected
ExpressTech Responsive Menu Pro
4.0.4 to < 4.0.4affected