Description
WordPress Plugin Stylish Price List is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently upload arbitrary images. WordPress Plugin Stylish Price List version 6.9.0 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 6.9.1 or latest
References
Related Vulnerabilities
MediaWiki Missing Authentication for Critical Function Vulnerability (CVE-2019-12468)
WordPress Plugin Safe SVG Denial of Service (1.9.4)
PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5288)
WordPress 4.7.x PHP Object Injection (4.7 - 4.7.20)
Apache Tomcat URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2018-11784)