CVE-2022-2554

CVE-2022-2554: Enable Media Replace < 4.0.0 - Admin+ Path Traversal

Vendor Unknown
Product Enable Media Replace
Weakness CWE-22 · Path traversal
Published October 10, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload folder, which could allow high privilege users such as admin to move them outside to the web root directory via a path traversal attack for example

Key dates

02Disclosure timeline

October 10, 2022 CVE published
August 3, 2024 Record updated