Unauthenticated Remote Code Execution in e-signature plugin

During a recent audit we discovered an unauthenticated remote code execution in the plugin e-signature. All versions less than 1.5.6.8 are vulnerable. Disclosure / Response Timeline January 7, 2021: Initial […]

Source: Security Feed