The MailPoet Newsletters plugin for WordPress is prone to a remote file-upload vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application. |