Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-2554
HistoryOct 10, 2022 - 9:15 p.m.

Path traversal

2022-10-1021:15:00
PRIOn knowledge base
www.prio-n.com
8
wordpress
plugin
path traversal
high privilege users
security vulnerability

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload folder, which could allow high privilege users such as admin to move them outside to the web root directory via a path traversal attack for example

CPENameOperatorVersion
enable_media_replacelt4.0.0

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%