An arbitrary file upload vulnerability in the Podlove Podcast Publisher plugin for WordPress allows unauthenticated remote attackers to execute arbitrary code on the host server.

The vulnerability exists in the podlove_handle_cache_files function, which lacks adequate file type validation. This allows an unauthenticated attacker to upload malicious files to the server, potentially leading to remote code execution.

Successful exploitation leads to full server compromise, resulting in potential data theft, site defacement, and the deployment of malicious payloads. With a CVSS score of 9.8, this vulnerability is critical and poses a significant risk to the integrity and availability of the affected WordPress environment.

Immediate Action: Update the Podlove Podcast Publisher plugin to version 4.5.2 or later immediately.

Proactive Monitoring: Scan the WordPress directory for suspicious file uploads or unexpected executable scripts, particularly in cache or upload folders.

Compensating Controls: Implement a Web Application Firewall (WAF) to block unauthorized file upload requests and restrict directory execution permissions for the uploads folder.

Public Exploit Available: Unknown

Given the ease of exploitation and the severity of the potential impact, administrators must update the plugin immediately. Failure to patch leaves the server vulnerable to complete takeover by remote, unauthenticated actors.