Lucene search
PRIOn knowledge basePRION:CVE-2023-2688HistoryJun 09, 2023 - 6:16 a.m.
Path traversal
2023-06-0906:16:00
PRIOn knowledge base
www.prio-n.com
6
wordpress
file upload
path traversal
vulnerability
administrator-level attackers
web root
nvd
The WordPress File Upload and WordPress File Upload Pro plugins for WordPress are vulnerable to Path Traversal in versions up to, and including, 4.19.1 via the vulnerable parameter wfu_newpath. This allows administrator-level attackers to move files uploaded with the plugin (located in wp-content/uploads by default) outside of the web root.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress_file_upload | le | 4.19.1 | |
| wordpress_file_upload_pro | le | 4.19.1 |
Related
nvd
nvd
CVE-2023-2688
2023-06-09 06:16:11
cvelist
cvelist
CVE-2023-2688
2023-06-09 05:33:26
cve
cve
CVE-2023-2688
2023-06-09 06:16:11
wpvulndb
wpvulndb
WordPress File Upload < 4.19.2 - Admin+ Path Traversal
2023-05-23 00:00:00
wordfence
wordfence