Basically, a malicious user could write a testimonial, upload a virus, and use the url to spread the virus elsewhere. Effectively, the site would be hosting malware.<\/p>\n
On a site where I have used this, I have added a couple lines of code testing whether the file really is a jpeg: I added that to pts_front_add_testimonial() and updated this line: https:\/\/wordpress.org\/plugins\/premium-testimonials\/<\/p>\n","protected":false},"template":"","class_list":["post-4979703","topic","type-topic","status-closed","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/4979703","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/4979703\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=4979703"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n\t\t\t$image_mime_type = exif_imagetype($_FILES['pts_photo']['tmp_name']);<\/code><\/p>\n
\n\t\t\t`if ( (strtolower($_ext) == ‘jpg’ || strtolower($_ext) == ‘jpeg’)
\n\t\t\t\t&& ( $image_mime_type == 2) )
\n.
\n.
\n.
\n`
\nBut I wonder if the plugin author shouldn’t update the code to make this more secure.<\/p>\n