WordPress College publisher Import plugin file upload vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. College publisher Import is a plugin for WordPress. WordPress College publisher Import plugin 0.1 and earlier versions have a file upload vulnerability that stems from the plugin’s failure to check the uploaded CSV file to be imported, allowing an elevated privilege user to upload arbitrary files. An attacker could exploit this vulnerability to upload script files such as PHP files leading to remote code execution.