CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager.This issue affects Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager: from n/a through 2.9.2.
Explanation of Vulnerability in Simple Terms
The Folders plugin for WordPress allows authenticated users with high privileges to upload files without proper validation. An attacker with admin or editor access can upload malicious files to the media library, potentially executing code on the site. The vulnerability affects versions up to 2.9.2 and requires administrative credentials to exploit.
What an attacker can do
Upload malicious files to the site's media library and execute code on the server.
Potential impact on your site
A compromised admin or editor account can upload files that execute code, leading to full site compromise.
Conditions required to exploit
Attacker must have high-level WordPress privileges (admin or editor role).
Key dates
External resources
Related vulnerabilities
