The Swiss Toolkit For WP plugin is vulnerable to arbitrary file uploads, allowing authenticated attackers to execute malicious code on the server.

The upload_extension_files() function fails to properly validate file types during the upload process. An authenticated attacker can bypass these checks to upload arbitrary files, potentially leading to Remote Code Execution (RCE).

The CVSS score of 8.8 underscores the critical nature of this flaw. By uploading malicious scripts, an attacker could gain full control over the web server, leading to complete site compromise, data theft, and the installation of persistent backdoors.

Immediate Action: Update the Swiss Toolkit For WP plugin to the latest available version to patch the file validation logic.

Proactive Monitoring: Monitor the server’s uploads directory for the presence of unauthorized or suspicious file extensions (e.g., .php, .phtml).

Compensating Controls: Use a Web Application Firewall (WAF) to restrict file uploads and inspect incoming traffic for malicious payloads attempting to bypass server-side validation.

Public Exploit Available: false

Due to the potential for full server compromise, this update should be prioritized immediately. Ensure that no untrusted users have the necessary permissions to access the plugin’s upload features until the patch is successfully applied.