Prevent Files Folders Access
1 CVEs
product
Monthly
The Prevent files / folders access WordPress plugin before 2.5.2 does not validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Information Disclosure
WordPress
PHP
Prevent Files Folders Access
NVD
WPScan
CVSS 3.1
7.2
EPSS
1.3%
EPSS 1%
CVSS 7.2
HIGH
POC
This Week
The Prevent files / folders access WordPress plugin before 2.5.2 does not validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Information Disclosure
WordPress
PHP
+1
NVD
WPScan