The ProSolution WP Client WordPress plugin before 2.0.9 has a vulnerability allowing unauthenticated users to read arbitrary data from the database and delete records due to improper sanitization of a cookie value used in SQL queries. This vulnerability affects WordPress sites using the plugin, potentially leading to unauthorized access to sensitive data. Administrators should be aware of this vulnerabili [truncated]
The ProSolution WP Client plugin for WordPress contains a critical arbitrary file upload vulnerability affecting versions up to and including 2.0.0. The flaw stems from an array validation mismatch in the file upload handling logic: only the first file in a multi-file upload array undergoes extension and MIME type validation, while all files in the array are subsequently processed and uploaded to a web-ac [truncated]
