Product
An unauthenticated arbitrary file upload vulnerability in the Automatic Translation WordPress plugin (versions 1.0.4 and below) allows remote attackers to upload arbitrary files via the /wp-json/automatic-translator/v1/saveDoc endpoint to achieve remote code execution.