WP Memory by Bill Minozzi <= 2.45 - Subscriber+ Arbitrary Plugin Installation
LANACOMMONVDB ID: 91fa6c81-bad8-41b3-bee7-46235c3658d7
The plugin does not have proper authorisation and Cross-Site Request Forgery (CSRF) check in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.org repository.