CVE-2020-10564

CVE-2020-10564 affects the WordPress File Upload plugin prior to 4.13.0. A directory traversal vulnerability allows remote code execution by uploading a crafted txt file into the lib directory, due to a wfu_include_lib call. Impact is remote code execution with network access. Remediation: upgrad...