📦 Mfolio

The mFolio Lite WordPress plugin allows authenticated attackers with Author-level access or higher to upload malicious SVG or EXE files due to missing capability checks. This can lead to arbitrary scr...