Paper/Archive/CVE-2024-9047

CVE-2024-9047

nickboss Iptanus File Upload — WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php

EPSS 93%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 99.8.998 × 2020.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfu_file_downloader.php. This makes it possible for unauthenticated attackers to read or delete files outside of the originally intended directory. Successful exploitation requires the targeted WordPress installation to be using PHP 7.4 or earlier.

Affected

ProductAffectedFixed inSource

Iptanus File Upload≤ 4.24.11–CNA

wordpress_file_upload≤ 4.24.11–CISA-ADP

Scores by source

Wordfence (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refwordfence.com/threat-intel/vulnerabilities/id/554a314c-9e8e-4691-9792-d086790ef40f?source=cve refplugins.trac.wordpress.org/changeset/3164449/wp-file-upload