Lucene search

K
wpvulndbRiccardo krauter (p4w)WPVDB-ID:846FB693-62CD-4E51-92C0-233D104AB1F1
HistoryMar 13, 2020 - 12:00 a.m.

WordPress File Upload < 4.13.0 - Directory Traversal to RCE

2020-03-1300:00:00
riccardo krauter (p4w)
wpscan.com
13

0.053 Low

EPSS

Percentile

93.1%

WordPress File Upload plugin directory traversal. It’s possible to use the directory traversal to gain RCE by uploading a file (doesn’t matter the extension) inside the /lib directory of the plugin. More details here https://github.com/beerpwn/CVE/tree/master/WP-File-Upload_disclosure_report

CPENameOperatorVersion
wp-file-uploadlt4.13.0

0.053 Low

EPSS

Percentile

93.1%

Related for WPVDB-ID:846FB693-62CD-4E51-92C0-233D104AB1F1