Lucene search

PRIOn knowledge basePRION:CVE-2020-36728

HistoryJun 07, 2023 - 1:15 p.m.

Path traversal

2023-06-0713:15:00

PRIOn knowledge base

www.prio-n.com

adning advertising

wordpress

file deletion

path traversal

unauthenticated attackers

arbitrary files

full control

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.8%

JSON

The Adning Advertising plugin for WordPress is vulnerable to file deletion via path traversal in versions up to, and including, 1.5.5. This allows unauthenticated attackers to delete arbitrary files which can be used to reset and gain full control of a site.

CPENameOperatorVersion
adning_advertisinglt1.5.6

CPE	Name	Operator	Version
	adning_advertising	lt	1.5.6

References

blog.nintechnet.com/critical-vulnerability-in-adning-advertising-plugin-actively-exploited-in-the-wild/

codecanyon.net/item/wp-pro-advertising-system-all-in-one-ad-manager/269693

www.wordfence.com/blog/2020/07/critical-vulnerabilities-patched-in-adning-advertising-plugin/

www.wordfence.com/threat-intel/vulnerabilities/id/e7506429-7f8a-45b5-b1b0-6fdb39599ee5?source=cve