Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-86450
HistoryNov 23, 2022 - 12:00 a.m.

WordPress Booster for WooCommerce plugin path traversal vulnerability

2022-11-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
wordpress
woocommerce
path traversal
vulnerability
file download
server
exploit

EPSS

0.001

Percentile

32.8%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Booster for WooCommerce plugin versions prior to 1.1.7, 5.6.5, and 5.6.7 contain a path traversal vulnerability that stems from the fact that the Booster Elite plugin does not validate file downloads for certain modules. An attacker could exploit the vulnerability to download arbitrary files from the server.

EPSS

0.001

Percentile

32.8%