Wp Cv Builder
Monthly
Unauthenticated arbitrary file upload in WP CV Builder plugin versions up to and including 1.3.1 allows remote attackers to write arbitrary content as .png files to the WordPress uploads directory via the 'wp_save_signature_image' function, which lacks a capability check. This integrity-only primitive requires no authentication and affects default installations, but does not directly enable code execution. No public exploit identified at time of analysis.
Unauthenticated arbitrary file upload in WP CV Builder plugin versions up to and including 1.3.1 allows remote attackers to write arbitrary content as .png files to the WordPress uploads directory via the 'wp_save_signature_image' function, which lacks a capability check. This integrity-only primitive requires no authentication and affects default installations, but does not directly enable code execution. No public exploit identified at time of analysis.