CVE-2024-12719

creationtimestamp| type| source ---|---|--- 2025-01-07 09:31:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113786373348142872 2025-01-07 09:36:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/385 2025-01-07 10:15:37+00:00| seen|...

CVE-2024-12719 WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal

The WordPress File Upload plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wfuajaxactionreadsubfolders' function in all versions up to, and including, 4.24.15. This makes it possible for authenticated attackers, with Subscriber-level acce...

CVE-2024-12719

CVE-2024-12719 relates to the WordPress File Upload plugin for WordPress. A missing capability check in the wfu_ajax_action_read_subfolders function across all versions up to 4.24.15 allows authenticated users with Subscriber+ privileges to perform limited path traversal to view directories and s...