WPTools by Bill Minozzi <= 3.42 - Subscriber+ Arbitrary Plugin Installation
LANACOMMONVDB ID: 8d1b6460-965d-4975-a061-6165eeb98955
The plugin does not have proper authorisation and Cross-Site Request Forgery (CSRF) check in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.org repository.