Critical Vulnerability in GoDAM WordPress Plugin Allows Arbitrary File Uploads and Potential RCE
The GoDAM – Organize WordPress Media Library & File Manager plugin for WordPress is vulnerable to arbitrary file uploads in versions up to and including 1.12.2. This critical vulnerability, with a CVSS score of 9.8, allows unauthenticated attackers to upload arbitrary files on the affected site's server, potentially leading to remote code execution. Immediate patching is recommended.