2 matches found
DEBIAN-CVE-2016-7169
Directory traversal vulnerability in the FileUploadUpgrader class in wp-admin/includes/class-file-upload-upgrader.php in the upgrade package uploader in WordPress before 4.6.1 allows remote authenticated users to access arbitrary files via a crafted urlholder parameter...
6.3CVSS6.8AI score0.03237EPSS
SaveExploits0References1
CVE-2016-7169
Directory traversal vulnerability in the FileUploadUpgrader class in wp-admin/includes/class-file-upload-upgrader.php in the upgrade package uploader in WordPress before 4.6.1 allows remote authenticated users to access arbitrary files via a crafted urlholder parameter...
6.5CVSS5AI score0.03237EPSS
SaveExploits0
20