📦 Editorskit

The EditorsKit WordPress plugin has an arbitrary file upload vulnerability in versions up to 1.40.3. Authenticated attackers with administrator privileges can upload malicious files to the server, pot...

This vulnerability allows users with contributor-level access in WordPress to execute arbitrary PHP code through the Gutenberg Block Editor Toolkit plugin. Attackers can inject malicious code via the ...