ProSolution WP Client vulnerabilities
4 known vulnerabilities in ProSolution WP Client from Prosolution. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
ProSolution WP Client: Unrestricted Upload of File with Dangerous Type
The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.0.10 via the proSol_handleFileUpload function. This is due to missing validation of the attacker-controlled Content-Disposition header
- 9.1 Critical severity
ProSolution WP Client: Improper Limitation of a Pathname to a Restricted Directory
The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the proSol_fileDeleteProcess function in all versions up to, and including, 2.0.8. This makes it possible for unauthenticated at
- 9.8 Critical severity
ProSolution WP Client: Unrestricted Upload of File with Dangerous Type
The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 2.0.0. This is due to an array validation mismatch where only the first file in the upload array undergoes extension and MIME type validatio
- 9.8 Critical severity
ProSolution WP Client: Unrestricted Upload of File with Dangerous Type
The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'proSol_fileUploadProcess' function in all versions up to, and including, 1.9.9. This makes it possible for unauthenticated attack