Input validation vulnerability in Dropshipping & Affiliation with Amazon 2.1.2

The Dropshipping & Affiliation with Amazon plugin for WordPress has a security issue that allows attackers with a subscriber-level account or higher to upload any type of file to the site’s server. This is because the plugin doesn’t check to make sure the file type is valid when it’s imported from a URL. If an attacker is able to upload the wrong type of file, it might allow them to run code on the affected website, which is a very serious security issue. The plugin versions up to and including 2.1.2 are affected.