| Package | Affected versions | Patched versions |
|---|---|---|
| stylish price list | < 6.9.1 | 6.9.1 |
The Stylish Price List WordPress plugin before 6.9.1 does not perform capability checks in its spl_upload_ser_img AJAX action (available to authenticated users), which could allow any authenticated users, such as subscriber, to upload arbitrary images.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free