Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-10564

Опубликовано: 13 мар. 2020
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Средний

Описание

An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by uploading a crafted txt file into the lib directory, because of a wfu_include_lib call.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:iptanus:wordpress_file_upload:*:*:*:*:*:wordpress:*:*
Версия до 4.13.0 (исключая)

EPSS

Процентиль: 97%
0.31747
Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

github логотип

GHSA-jv5x-hvg3-3pjm

CVSS3: 9.8
github
больше 3 лет назад

An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by uploading a crafted txt file into the lib directory, because of a wfu_include_lib call.

EPSS

Процентиль: 97%
0.31747
Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-22