CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
The WordPress File Upload plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.24.7 via the 'uploadpath' parameter of the wordpress_file_upload shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload limited files to arbitrary locations on the web server.
Explanation of Vulnerability in Simple Terms
Iptanus File Upload versions up to 4.24.7 contain a path traversal vulnerability that allows an authenticated attacker to write files outside the intended upload directory. An attacker with low-level user privileges can craft malicious file paths to place files in arbitrary locations on the server, potentially overwriting critical application files or injecting malicious code.
What an attacker can do
Write files to arbitrary locations on the server outside the upload directory.
Potential impact on your site
Attackers with user accounts can overwrite files or inject code into sensitive directories, compromising site integrity.
Conditions required to exploit
Attacker must have a low-privilege user account on the site and network access to the upload functionality.
Key dates
External resources
Related vulnerabilities
