Unpatched file upload flaw in email attachments
Security scanners flag an unpatched file upload flaw in the attachment feature, and site owners ask whether it is a false positive.
Tier II · Emerging Problems that are still building up.
3 public reports · first reported 15 April 2025 · last reported 27 April 2026
What's going wrong
Site owners running this autoresponder plugin report that security scanners such as Wordfence flag its attachment handling as allowing arbitrary file uploads and remote PHP execution.
AI-assisted: written with the help of AI from the reports. The idea report has the full summary.
In the idea report
- The full summary.
- The products the 3 reports are about, and how many came each month.
- Related problems.
No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.