Wpeverest User Registration Advanced Fields vulnerabilities

CVE-2026-4882 [CRITICAL] CWE-434 CVE-2026-4882: The User Registration Advanced Fields plugin for WordPress is vulnerable to arbitrary file uploads d The User Registration Advanced Fields plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'URAF_AJAX::method_upload' function in all versions up to, and including, 1.6.20. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make rem