Wordpress : Security Vulnerabilities (Directory Traversal)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2019-8943	22	Dir. Trav.	2019-02-20	2021-02-23	4.0	None	Remote	Low	???	None	Partial	None
WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can write the output image to an arbitrary directory via a filename containing two image extensions and ../ sequences, such as a filename ending with the .jpg?/../../file.jpg substring.
2	CVE-2018-12895	22	Exec Code Dir. Trav.	2018-06-26	2021-11-05	6.5	None	Remote	Low	???	Partial	Partial	Partial
WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink function and can delete the wp-config.php file. This is related to missing filename validation in the wp-includes/post.php wp_delete_attachment function. The attacker must have capabilities for files and posts that are normally available only to the Author, Editor, and Administrator roles. The attack methodology is to delete wp-config.php and then launch a new installation process to increase the attacker's privileges.
3	CVE-2017-14722	22	Dir. Trav.	2017-09-23	2017-11-10	5.0	None	Remote	Low	Not required	Partial	None	None
Before version 4.8.2, WordPress allowed a Directory Traversal attack in the Customizer component via a crafted theme filename.
4	CVE-2017-14719	22	Dir. Trav.	2017-09-23	2017-11-10	5.0	None	Remote	Low	Not required	Partial	None	None
Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.
5	CVE-2016-7169	22	Dir. Trav.	2017-01-05	2017-11-04	6.5	None	Remote	Low	???	Partial	Partial	Partial
Directory traversal vulnerability in the File_Upload_Upgrader class in wp-admin/includes/class-file-upload-upgrader.php in the upgrade package uploader in WordPress before 4.6.1 allows remote authenticated users to access arbitrary files via a crafted urlholder parameter.
6	CVE-2016-6896	22	DoS Dir. Trav.	2017-01-18	2017-09-03	5.5	None	Remote	Low	???	Partial	None	Partial
Directory traversal vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress 4.5.3 allows remote authenticated users to cause a denial of service or read certain text files via a .. (dot dot) in the plugin parameter to wp-admin/admin-ajax.php, as demonstrated by /dev/random read operations that deplete the entropy pool.
7	CVE-2008-4769	22	Dir. Trav.	2008-10-28	2017-08-08	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Directory traversal vulnerability in the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from third party information.
8	CVE-2008-0615	22	Dir. Trav.	2008-02-06	2018-10-15	4.0	None	Remote	Low	???	Partial	None	None
Directory traversal vulnerability in wp-admin/admin.php in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allows remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) folder and (2) file parameters.
9	CVE-2008-0196	22	Dir. Trav.	2008-01-10	2018-10-15	5.0	None	Remote	Low	Not required	Partial	None	None
Multiple directory traversal vulnerabilities in WordPress 2.0.11 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the page parameter to certain PHP scripts under wp-admin/ or (2) the import parameter to wp-admin/admin.php, as demonstrated by discovering the full path via a request for the \..\..\wp-config pathname; and allow remote attackers to modify arbitrary files via a .. (dot dot) in the file parameter to wp-admin/templates.php.
10	CVE-2008-0194	22	DoS Dir. Trav.	2008-01-10	2018-10-15	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows remote attackers to read arbitrary files, delete arbitrary files, and cause a denial of service via a .. (dot dot) in the backup parameter in a wp-db-backup.php action to wp-admin/edit.php. NOTE: this might be the same as CVE-2006-5705.1.
11	CVE-2007-6369	22	Dir. Trav.	2007-12-15	2017-09-29	5.0	None	Remote	Low	Not required	Partial	None	None
Multiple directory traversal vulnerabilities in resize.php in the PictPress 0.91 and earlier plugin for WordPress allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) size or (2) path parameter.
12	CVE-2006-5705		Dir. Trav.	2006-11-04	2011-03-08	6.0	None	Remote	Medium	???	Partial	Partial	Partial
Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the (1) backup and (2) fragment parameters in a GET request.

Total number of vulnerabilities : 12 Page : 1 (This Page)