CVE-2024-9422 – GEO My WordPress < 4.5 - Admin+ Arbitrary File Upload

https://notcve.org/view.php?id=CVE-2024-9422

The GEO my WP WordPress plugin before 4.5, gmw-premium-settings WordPress plugin before 3.1 does not sufficiently validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server. • https://wpscan.com/vulnerability/81320923-767c-43f0-a8eb-b398c306c16f •