Directory traversal

2020-03-1323:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.053 Low

EPSS

Percentile

93.1%

JSON

An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by uploading a crafted txt file into the lib directory, because of a wfu_include_lib call.

CPENameOperatorVersion
wordpress_file_uploadlt4.13.0

CPE	Name	Operator	Version
	wordpress_file_upload	lt	4.13.0

References

github.com/beerpwn/CVE/tree/master/WP-File-Upload_disclosure_report/

wordpress.org/plugins/wp-file-upload/

wpvulndb.com/vulnerabilities/10132