Lucene search

K
wpvulndbWpvulndbWPVDB-ID:2EFE1CDE-5EBC-442D-A7A9-29A4ED6E3037
HistoryApr 11, 2024 - 12:00 a.m.

Media Library Folders < 8.1.9 - Authenticated (Author+) Directory Traversal

2024-04-1100:00:00
wpscan.com
6
wordpress
media library folders
directory traversal
vulnerability
authenticated
author-level access

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.2%

Description The Media Library Folders plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.1.8. This makes it possible for authenticated attackers, with author-level access and above, to read/access the contents of arbitrary files on the server, which can contain sensitive information.

CPENameOperatorVersion
eq8.1.9

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.2%

Related for WPVDB-ID:2EFE1CDE-5EBC-442D-A7A9-29A4ED6E3037