Directory traversal

2024-02-2616:27:00

PRIOn knowledge base

www.prio-n.com

brizy page builder

wordpress

directory traversal

authenticated attackers

file upload

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.8%

JSON

The Brizy – Page Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.39 via the ‘id’. This makes it possible for authenticated attackers, with contributor-level access and above, to upload files to arbitrary locations on the server