WordPress HTML5 AV Manager Plugin 0.2.7 - Arbitrary File Upload
HTML5 AV Manager
HTML5 AV Manager plugin is prone to an arbitrary file upload vulnerability. Restricted access to this script is not properly realized. In that way an attacker can to upload files containing malicious PHP code and run it in the context of the web server process. Other attacks are also possible.