The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'proSol_fileUploadProcess' fun…

The ProSolution WP Client plugin for WordPress contains a critical arbitrary file upload vulnerability in versions up to 1.9.9. The vulnerability exists in the 'proSol_fileUploadProcess' function due to missing file type validation. Unauthenticated attackers can exploit this flaw to upload arbitrary files to the server, potentially leading to remote code execution. This represents a high-severity security risk for WordPress sites using the affected plugin versions.