Lucene search
Japan Vulnerability NotesJVN:85380030HistoryMay 17, 2024 - 12:00 a.m.
JVN#85380030: WordPress Plugin "Download Plugins and Themes from Dashboard" vulnerable to path traversal
2024-05-1700:00:00
Japan Vulnerability Notes
jvn.jp
7
wordpress
plugin
path traversal
vulnerability
update
version 1.8.6
wpfactory llc
WordPress Plugin “Download Plugins and Themes from Dashboard” provided by WPFactory LLC contains a path traversal vulnerability (CWE-22).
Impact
The user with “switch_themes” privilege may obtain arbitrary files on the server.
Solution
Update the plugin
Update the plugin to the latest version according to the information provided by the developer.
Products Affected
- Download Plugins and Themes from Dashboard versions prior to 1.8.6
Related
nvd
nvd
CVE-2024-35162
2024-05-22 06:15:12
cve
cve
CVE-2024-35162
2024-05-22 06:15:12
cvelist
cvelist
CVE-2024-35162
2024-05-22 05:30:33
wpvulndb
wpvulndb
wordfence
wordfence