Car Dealer by Bill Minozzi <= 3.04 - Subscriber+ Arbitrary Plugin Installation
LANACOMMONVDB ID: 7cfb0c84-bcca-4f66-8854-0edee25ef18a
The plugin does not have proper authorisation and Cross-Site Request Forgery (CSRF) check in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.org repository.