title: Advanced Uploader <= 4.2 - Subscriber+ Arbitrary File Upload
description: The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to RCE
problem types: CWE-434 Unrestricted Upload of File with Dangerous Type
affected:
{
product: Advanced uploader
vendor: Unknown
versions:
lessThanOrEqual: 4.2, status: affected, version: 4.2, versionType: custom
}