WordPress Ninja Forms-File Uploads Extension Plugin Arbitrary File Uploads Vulnerability

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is an application plugin for WordPress. WordPress Ninja Forms - File Uploads Extension Plugin 3.30 and earlier versions are vulnerable to arbitrary file uploads, which vulnerability stems from the program not validating the correct input for the file type of ~/include/ajax/controller/uploads.php. An attacker could use this vulnerability to upload malicious files that could be used to execute remote code.