CVE-2024-9047

POC - плагин WordPress File Upload, в файле wfufiledownloader.php до версии Отказ от ответственности : Данный Proof of Concept POC создан только для образовательных и этических целей тестирования. Использование этого инструмента для атаки на цели без предварительного обоюдного согласия незаконно...

CVE-2024-9047-Exploit

CVE-2024-9047: Эксплойт для плагина WordPress File Upload Описание Плагин WordPress File Upload для WordPress уязвим к Path Traversal во всех версиях до 4.24.11 включительно через файл wfufiledownloader.php. Эта уязвимость позволяет неаутентифицированным злоумышленникам читать или удалять файлы з...

CVE-2024-11613: Improper Control of Generation of Code

The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion in all versions up to, and including, 4.24.15 via the 'wfufiledownloader.php' file. This is due to lack of proper sanitization of the 'source' parameter and...

CVE-2024-9939: Improper Limitation of a Pathname to a Restricted Directory

The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.13 via wfufiledownloader.php. This makes it possible for unauthenticated attackers to read files outside of the originally intended directory...

CVE-2024-9047: Improper Limitation of a Pathname to a Restricted Directory

The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfufiledownloader.php. This makes it possible for unauthenticated attackers to read or delete files outside of the originally intended directory. Successful exploitatio...