TI-2024-05857 CVE-2024-6313 · GHSA-3g5x-2qp3-gm68
Gutenberg Forms <= 2.2.9 - Unauthenticated Arbitrary File Upload
Priority MEDIUM 51
The Gutenberg Forms plugin for WordPress is vulnerable to arbitrary file uploads due to the users can specify the allowed file types in the 'upload' function in versions up to, and including, 2.2.9.