WordPress - Peugeot Music - CRITICAL - CVE-2018-25335. The Peugeot Music Plugin version 1.0 for WordPress is vulnerable to an arbitrary file upload issue, allowing unauthenticated attackers to upload malicious files. By exploiting the upload.php endpoint, attackers can manipulate the 'name' parameter within POST requests to bypass security measures and execute arbitrary code from the uploads directory. This type of vulnerability poses significant risks as it can lead to remote code execution and complete system compromise. BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io