Michael Dyrna

**Name of the Vulnerable Software and Affected Versions** GEO my WP WordPress plugin versions prior to 4.5 gmw-premium-settings WordPress plugin versions prior to 3.1 **Description** The issue is related to insufficient validation of files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server. This could potentially lead to remote attacks. **Recommendations** For GEO my WP WordPress plugin versions prior to 4.5, update to version 4.5 or later. For gmw-premium-settings WordPress plugin versions prior to 3.1, update to version 3.1 or later. As a temporary workaround, consider restricting file uploads to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** GEO my WP WordPress plugin versions prior to 4.5.0.2 **Description** The issue allows unauthenticated attackers to include arbitrary files in PHP's execution context, leading to Remote Code Execution. This can be exploited by including malicious files, potentially allowing attackers to execute arbitrary code on the affected system. **Recommendations** For versions prior to 4.5.0.2, update to version 4.5.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.