Beveiligingsadvies

CVE-2022-2557

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-08-22 15:04:22
Laatst bijgewerkt 2024-08-03 00:39:08
Toegewezen door WPScan
CVSS-score geen score
Status PUBLISHED

Beschrijving

The Team WordPress plugin before 4.1.2 contains a file which could allow any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is returned to the user