CVE-2020-24144

July 10, 2021

Directory traversal in the Media File Organizer (aka media-file-organizer) plugin 1.0.1 for WordPress lets an attacker get access to files that are stored outside the web root folder via the items[] parameter in a move operation.

Summary:

Directory traversal in the Media File Organizer (aka media-file-organizer) plugin 1.0.1 for WordPress lets an attacker get access to files that are stored outside the web root folder via the items[] parameter in a move operation.

Reference Links(if available):

  • https://ru.wordpress.org/plugins/media-file-organizer/
  • https://github.com/secwx/research/blob/main/cve/CVE-2020-24144.md

  • CVSS Score (if available)

    v2: / MEDIUM

    v3: /

    Links to Exploits(if available)

  • You may have missed

    image

    [MEOW] – Ransomware Victim: Zyloware

    November 14, 2024
    image

    [MEOW] – Ransomware Victim: Cottles Asphalt Maintenance Inc

    November 14, 2024
    image

    [MEOW] – Ransomware Victim: Karl Malone Toyota

    November 14, 2024
    image

    [MEOW] – Ransomware Victim: Pine Belt Cars

    November 14, 2024
    image

    [MEOW] – Ransomware Victim: J[.]S[.]T[.] Espana

    November 14, 2024