TI-2020-19362 CVE-2020-37227 · GHSA-7487-8952-hmfcWordPress Plugin HS Brand Logo Slider 2.1 Unrestricted File UploadPriority HIGH 73HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by uploading arbitrary files.CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00541 · Published 2026-05-16 · No fix listed CWE-434