TI-2024-05858 CVE-2024-6314 · GHSA-w38c-gpcj-fg7w
IQ Testimonials <= 2.2.7 - Unauthenticated Arbitrary File Upload
Priority MEDIUM 51
The IQ Testimonials plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'process_image_upload' function in versions up to, and including, 2.2.7.