Description
An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by uploading a crafted txt file into the lib directory, because of a wfu_include_lib call.
Unscored
CVE-2020-10564
EUVD-2020-3016GHSA-jv5x-hvg3-3pjm
An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by u…
Published Mar 13, 2020 · Updated Aug 4, 2024 · Assigned by mitre