Beveiligingsadvies

CVE-2024-9939

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-01-08 08:18:17

Laatst bijgewerkt 2026-05-20 14:28:11

Toegewezen door Wordfence

CVSS-score 7.5

Status PUBLISHED

Beschrijving

The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.13 via wfu_file_downloader.php. This makes it possible for unauthenticated attackers to read files outside of the originally intended directory.

← Alle CVE's bekijken Bekijk op cve.org ↗