vulnerability

WordPress Plugin: ninja-forms-uploads: CVE-2019-10869: Unrestricted Upload of File with Dangerous Type

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Apr 11, 2019
Added
May 15, 2025
Modified
May 15, 2025

Description

Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uploads add-on is activated). This allows an attacker to traverse the file system to access files and execute code via the includes/fields/upload.php (aka upload/submit page) name and tmp_name parameters.

Solution

ninja-forms-uploads-plugin-cve-2019-10869
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.