Input validation vulnerability in Bit File Manager – 100% free file manager for WordPress 4.1.5

The Bit File Manager plugin for WordPress, found in versions up to 4.1.4, is vulnerable to Cross-Site Request Forgery. This means that if a malicious user can trick a site administrator into performing an action, such as clicking a link, they can use a forged request to upload any file they choose to the server. This is because the plugin’s upload form doesn’t use the correct security measures to prevent this from happening.