Description
The GEO my WP WordPress plugin before 4.5, gmw-premium-settings WordPress plugin before 3.1 does not sufficiently validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Unknown GEO my WP
Default version status: unaffected
4.0 to < 4.5affected
Unknown gmw-premium-settings
Default version status: unaffected
0 to < 3.1affected