CVE-2023-7061: 
WordPress vulnerability analysis and mitigation

CVE-2023-7061 affects the Advanced File Manager Shortcodes plugin for WordPress in versions up to and including 2.5.3. The vulnerability was discovered and disclosed on July 9, 2024. This security issue impacts WordPress installations using the affected plugin versions (NVD).

The vulnerability is classified as an arbitrary file upload vulnerability. It has been assigned a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The weakness is categorized under CWE-434 (Unrestricted Upload of File with Dangerous Type) (NVD).

The vulnerability allows authenticated attackers with contributor-level access or higher to upload arbitrary files to the affected site's server. This capability could potentially lead to remote code execution, giving attackers significant control over the compromised system (NVD).

Users running affected versions of the Advanced File Manager Shortcodes plugin should upgrade to a version newer than 2.5.3 if available. If an immediate upgrade is not possible, it is recommended to restrict access to contributor-level accounts and monitor file upload activities closely (NVD).