TI-2025-01974 CVE-2025-2249 · GHSA-r6pr-wvrw-7w54
SoJ Soundslides <= 1.2.2 - Authenticated (Contributor+) Arbitrary File Upload
Priority MEDIUM 42
The SoJ SoundSlides plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the soj_soundslides_options_subpanel() function in all versions up to, and including, 1.2.2.