Wordpress » Wordpress : Security Vulnerabilities Published In 2019 (Directory traversal)

Published in:

2019 January February March April May June July August September October November December

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Publish Date Update Date CVE Number CVE Number CVSS Score EPSS Score

CVE-2019-8943

Public exploit exists

WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can write the output image to an arbitrary directory via a filename containing two image extensions and ../ sequences, such as a filename ending with the .jpg?/../../file.jpg substring.

Max Base Score	6.5
Published	2019-02-20
Updated	2021-02-23
EPSS	96.08%

1 vulnerabilities found