WordPress Plugin Vulnerabilities

WordPress File Upload < 4.19.2 - Admin+ Path Traversal

Description

The plugin does not properly prevent attackers from modifying the target path to which the plugin will move files, via the wfu_newpath parameter. This could allow administrators to move files outside of the site's root, which may be a problem in multisite configurations.

Affects Plugins

Plugin icon
wp-file-upload
Fixed in 4.19.2

References

CVE
CVE-2023-2688
URL
https://www.wordfence.com/threat-intel/vulnerabilities/detail/wordpress-file-upload-wordpress-file-upload-pro-4191-authenticated-administrator-path-traversal

Classification

Type
TRAVERSAL
OWASP top 10
A1: Injection
CWE
CWE-22
CVSS
4.9 (medium)

Miscellaneous

Original Researcher
Marco Wotschka
Verified
No
WPVDB ID
12aa16b1-67eb-458c-b50f-95373b5fe883

Timeline

Publicly Published
2023-05-23 (about 2 years ago)
Added
2023-06-09 (about 2 years ago)
Last Updated
2023-06-09 (about 2 years ago)

Other

Published
Title
Published
2023-09-26
Title
Welcart e-Commerce < 2.8.22 - Author+ Path Traversal
Published
2019-07-28
Title
WP Fastest Cache <= 0.8.9.5 - Directory Traversal
Published
2022-06-06
Title
Product Configurator for WooCommerce < 1.2.32 - Unauthenticated Arbitrary File Deletion
Published
2025-10-30
Title
WordPress User Extra Fields < 16.8 - Subscriber+ Arbitrary File Deletion
Published
2021-12-14
Title
True Ranker < 2.2.4 - Unauthenticated Arbitrary File Access via Path Traversal