Prosolution vulnerabilities
We track 4 vulnerabilities in Prosolution products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 16, 2026.
Latest Prosolution vulnerabilities
- 9.8 Critical severity
ProSolution WP Client: Unrestricted Upload of File with Dangerous Type
The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.0.10 via the proSol_handleFileUpload function. This is due to missing validation of the attacker-controlled Content-Disposition header
- 9.1 Critical severity
ProSolution WP Client: Improper Limitation of a Pathname to a Restricted Directory
The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the proSol_fileDeleteProcess function in all versions up to, and including, 2.0.8. This makes it possible for unauthenticated at
- 9.8 Critical severity
ProSolution WP Client: Unrestricted Upload of File with Dangerous Type
The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 2.0.0. This is due to an array validation mismatch where only the first file in the upload array undergoes extension and MIME type validatio
- 9.8 Critical severity
ProSolution WP Client: Unrestricted Upload of File with Dangerous Type
The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'proSol_fileUploadProcess' function in all versions up to, and including, 1.9.9. This makes it possible for unauthenticated attack