WordPress WPLP Cookie Consent Arbitrary File Upload

The WPLP Cookie Consent plugin for WordPress is vulnerable. An unauthenticated attacker can upload arbitrary files to the affected site's server due to missing file type validation and an authorization bypass in the REST API.

This vulnerability affects all versions up to and including 4.4.1.

Exploitation of this issue may allow remote code execution.