CVE-2020-10564

An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by uploading a crafted txt file into the lib directory, because of a wfuincludelib call...

CVE-2020-10564

CVE-2020-10564 affects the WordPress File Upload plugin prior to 4.13.0. A directory traversal vulnerability allows remote code execution by uploading a crafted txt file into the lib directory, due to a wfu_include_lib call. Impact is remote code execution with network access. Remediation: upgrad...