Beta

Report

WPAMS <= 44.0 (17-08-2023) is vulnerable to Arbitrary File Upload vulnerability

Subscriber
Published
2025-04-16

The WPAMS - Apartment Management System for wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 44.0 (17-08-2023). This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.

CVSS

Score:9.9

Severity:Critical

Version: 44.0 (17-08-2023)

The plugin vendor has not patched this vulnerability at the moment.