Description
WordPress Plugin wpCentral is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently escalate their privilege or alter/upload any file. WordPress Plugin wpCentral version 1.4.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.4.8 or latest
References
https://www.webarxsecurity.com/wpcentral-plugin-leads-to-multiple-vulnerabilities/
https://plugins.svn.wordpress.org/wp-central/trunk/readme.txt
Related Vulnerabilities
Drupal Core 8.6.x Remote Code Execution (8.6.0 - 8.6.9)
Oracle Application Server Other Vulnerability (CVE-2007-0283)
Oracle Application Server Other Vulnerability (CVE-2004-2244)
WordPress Plugin Poll, Survey, Form & Quiz Maker by OpinionStage Unspecified Vulnerability (15.0.0)
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1000169)