Skip to content
OpenAdvisories

Archive

12 October 2024

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-9047 Public exploit Scanner template EPSS 93%

    WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php

    The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfu_file_downloader.php. This makes it possible for unauthenticated attackers to read or delete files outside of the originally in…