Input validation vulnerability in User Submitted Posts – Enable Users to Submit Posts from the Front End 20230902

The User Submitted Posts plugin for WordPress may have a vulnerability which allows people to upload files to the affected site’s server without permission. This vulnerability exists in versions up to and including 20230902. It is possible for unauthenticated attackers to upload files with certain extensions, as long as the file does not have the extension ‘php’. This could allow malicious users to execute code on the server, which could cause serious damage.