Lucene search

K
wpvulndbWpvulndbWPVDB-ID:B5D3B7B9-B916-4EF9-9E24-BB47FEDEE23D
HistoryJan 03, 2024 - 12:00 a.m.

Ultimate Addons for Beaver Builder < 1.35.14 - Contributor+ Arbitrary File Download

2024-01-0300:00:00
wpscan.com
10
wordpress
directory traversal
authenticated attackers

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.6%

Description The Ultimate Addons for Beaver Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.35.13. This makes it possible for authenticated attackers, with Contributor access and above, to read the contents of a limited subset of arbitrary files on the server, which can contain sensitive information.

CPENameOperatorVersion
eq1.35.14

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.6%

Related for WPVDB-ID:B5D3B7B9-B916-4EF9-9E24-BB47FEDEE23D