Input validation vulnerability in WPDating 7.1.2

The WPDating plugin for WordPress, which is used up to version 7.1.2, has a security vulnerability that allows attackers to upload malicious files to the server. This is because a specific function of the plugin does not have proper validation for the type of file being uploaded. While some sources of information say that a malicious person would need to trick an administrator into clicking a link to be able to use this vulnerability, we think that it is possible for unauthenticated users to exploit it as well.