2024-10-11

2024-10-12

2024-10-13

All (1) Critical (1) High (3) Medium (18)

CVE-2024-9047 Oct 12, 07:15 CRITICAL POC PATCH THREAT Act Now

The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfu_file_downloader.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP WordPress Path Traversal File Upload Wordpress File Upload +2

NVD

CVSS 3.1

9.8

EPSS

92.3%