WordPress Top Quark Architecture Plugin Arbitrary File Upload Vulnerability
Description
A vulnerability has been discovered in the Top Quark Architecture plugin for WordPress, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to the wp-content/plugins/topquark/lib/js/fancyupload/showcase/batch/script.php script allowing the upload of arbitrary files to a folder inside the webroot. This can be exploited to execute arbitrary PHP code by uploading a malicious PHP script.
The vulnerability is confirmed in version 2.1.0. Prior versions may also be affected.
Vulnerable Products
Vulnerable Software: WordPress Top Quark Architecture Plugin 2.x
