vulnerability

WordPress Plugin: folders-pro: CVE-2024-2023: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:N)
Published
Jun 13, 2024
Added
May 15, 2025
Modified
May 15, 2025

Description

The Folders and Folders Pro plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.0 in Folders and 3.0.2 in Folders Pro via the 'handle_folders_file_upload' function. This makes it possible for authenticated attackers, with author access and above, to upload files to arbitrary locations on the server.

Solution

folders-pro-plugin-cve-2024-2023
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.