WordPress 297

To plugin page Claim VDP

WordPress <= 4.8.1 is vulnerable to Directory Traversal

Resolve by 19 October, 2017 Low priority

Unknown severity CVSS 3.1 score

Prevent exploits against this and future vulnerabilities!

Protect now

Patchstack Professional users are protected since 09.12.2022

Enable Protection

Solution

Update to fix

Update the WordPress to the latest available version (at least 4.8.2).

Alex Chapman (noxrnet) discovered and reported this Directory Traversal vulnerability in WordPress. This could allow a malicious actor to see all files in a given directory or determine if certain files/directories exist in given folder. This can be used to exploit other weaknesses in the system This vulnerability has been fixed in version 4.8.2.

Have additional information or questions about this entry? Get in touch.

Other vulnerabilities in this WordPress core

1 present

296 fixed

View all