title: Imagements <= 1.2.5 - Unauthenticated Arbitrary File Upload to RCE
description: The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in comments, however only checks for the Content-Type in the request to forbid dangerous files. This allows unauthenticated attackers to upload arbitrary files by using a valid image Content-Type along with a PHP filename and code, leading to RCE.
problem types: CWE-434 Unrestricted Upload of File with Dangerous Type
affected:
{
product: Imagements
vendor: williewonka
versions:
lessThanOrEqual: 1.2.5, status: affected, version: 1.2.5, versionType: custom
}