Skip to main content

Prevent Files Folders Access

1 CVEs product

Monthly

CVE-2023-4238 Sep 25, 16:15 HIGH POC This Week

The Prevent files / folders access WordPress plugin before 2.5.2 does not validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress Information Disclosure Prevent Files Folders Access Miniorange
NVD WPScan
CVSS 3.1
7.2
EPSS
1.3%
EPSS 1% CVSS 7.2
HIGH POC This Week

The Prevent files / folders access WordPress plugin before 2.5.2 does not validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress Information Disclosure +2
NVD WPScan

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy