TI-2023-00875 CVE-2023-0924 · GHSA-9q4q-2728-w948Zyrex Popup <= 1.0 - Admin+ Arbitrary File UploadPriority HIGH 67The ZYREX POPUP WordPress plugin through 1.0 does not validate the type of files uploaded when creating a popup, allowing a high privileged user (such as an Administrator) to upload arbitrary files, even when modifying t…CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00962 · Published 2023-05-02 · No fix listed CWE-434
