CVE-2024-9422 Information

Description

The GEO my WP WordPress plugin before 4.5 gmw-premium-settings WordPress plugin before 3.1 does not sufficiently validate files to be uploaded which could allow attackers to upload arbitrary files such as PHP on the server.

Reference

https://wpscan.com/vulnerability/81320923-767c-43f0-a8eb-b398c306c16f/