WordPress Plugin Vulnerabilities
Add From Server <= 3.3.3 - Authenticated Path Traversal to Arbitrary File Access
Description
An authenticated attacker with low permission can read arbitrary files on server using Path Traversal.
The plugin author states that this is by design and that the plugin should not be used. Please refer to the references.
Proof of Concept
Affects Plugins
No known fix References
Classification
Type
TRAVERSAL
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
HoanHP
Submitter
hoan
Submitter website
Submitter twitter
Verified
No
WPVDB ID
Timeline
Publicly Published
2020-08-11 (about 5 years ago)
Added
2020-09-06 (about 5 years ago)
Last Updated
2020-09-21 (about 5 years ago)
WPScan 