CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
The WordPress File Upload and WordPress File Upload Pro plugins for WordPress are vulnerable to Path Traversal in versions up to, and including, 4.19.1 via the vulnerable parameter wfu_newpath. This allows administrator-level attackers to move files uploaded with the plugin (located in wp-content/uploads by default) outside of the web root.
Explanation of Vulnerability in Simple Terms
Iptanus File Upload versions up to 4.19.1 contain a path traversal vulnerability that allows authenticated administrators to read files outside the intended upload directory. An attacker with high-level privileges can craft malicious file paths to access sensitive files on the server. This vulnerability requires administrative access and does not allow file modification or system availability impact.
What an attacker can do
Read arbitrary files on the server outside the upload directory.
Potential impact on your site
Administrators with malicious intent or compromised admin accounts can access sensitive files like configuration files or database backups.
Conditions required to exploit
Attacker must have administrator-level privileges on the site.
Key dates
External resources
Related vulnerabilities
