TI-2024-11913 CVE-2024-12854 · GHSA-fq34-fqjv-qq54
Garden Gnome Package <= 2.3.0 - Authenticated (Author+) Arbitrary File Upload
Priority MEDIUM 42
The Garden Gnome Package plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the functionality that automatically extracts 'ggpkg' files that have been uploaded in all vers…