Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c96c-cv9h-9f96

Опубликовано: 14 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The Restrict File Access plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.2 via the output() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.

The Restrict File Access plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.2 via the output() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.

EPSS

Процентиль: 58%
0.00365
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 6.5
nvd
5 дней назад

The Restrict File Access plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.2 via the output() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.

EPSS

Процентиль: 58%
0.00365
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22