Vulnerabilities > CVE-2023-2688 - Unspecified vulnerability in Iptanus Wordpress File Upload and Wordpress File Upload PRO

CVSS 4.9 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

iptanus

NVD

Published: 2023-06-09

Updated: 2024-11-21

Summary

The WordPress File Upload and WordPress File Upload Pro plugins for WordPress are vulnerable to Path Traversal in versions up to, and including, 4.19.1 via the vulnerable parameter wfu_newpath. This allows administrator-level attackers to move files uploaded with the plugin (located in wp-content/uploads by default) outside of the web root.

Vulnerable Configurations

Part	Description	Count
Application	Iptanus Iptanus Wordpress File Upload PRO - Iptanus Wordpress File Upload PRO 4.16.3 Iptanus Wordpress File Upload - Iptanus Wordpress File Upload 1.0 Iptanus Wordpress File Upload 1.1 Iptanus Wordpress File Upload 1.2 Iptanus Wordpress File Upload 1.3 Iptanus Wordpress File Upload 1.4 Iptanus Wordpress File Upload 1.4.1 Iptanus Wordpress File Upload 1.5 Iptanus Wordpress File Upload 1.6 Iptanus Wordpress File Upload 1.6.1 Iptanus Wordpress File Upload 1.6.2 Iptanus Wordpress File Upload 1.6.3 Iptanus Wordpress File Upload 1.7 Iptanus Wordpress File Upload 1.7.1 Iptanus Wordpress File Upload 1.7.2 Iptanus Wordpress File Upload 1.7.3 Iptanus Wordpress File Upload 1.7.4 Iptanus Wordpress File Upload 1.7.5 Iptanus Wordpress File Upload 1.7.6 Iptanus Wordpress File Upload 1.7.7 Iptanus Wordpress File Upload 1.7.8 Iptanus Wordpress File Upload 1.7.9 Iptanus Wordpress File Upload 1.7.10 Iptanus Wordpress File Upload 1.7.11 Iptanus Wordpress File Upload 1.7.12 Iptanus Wordpress File Upload 1.7.13 Iptanus Wordpress File Upload 1.7.14 Iptanus Wordpress File Upload 2.0.1 Iptanus Wordpress File Upload 2.0.2 Iptanus Wordpress File Upload 2.1.1 Iptanus Wordpress File Upload 2.1.2 Iptanus Wordpress File Upload 2.1.3 Iptanus Wordpress File Upload 2.2.1 Iptanus Wordpress File Upload 2.2.2 Iptanus Wordpress File Upload 2.2.3 Iptanus Wordpress File Upload 2.3.1 Iptanus Wordpress File Upload 2.4.1 Iptanus Wordpress File Upload 2.4.2 Iptanus Wordpress File Upload 2.4.3 Iptanus Wordpress File Upload 2.4.4 Iptanus Wordpress File Upload 2.4.5 Iptanus Wordpress File Upload 2.4.6 Iptanus Wordpress File Upload 2.5.0 Iptanus Wordpress File Upload 2.5.1 Iptanus Wordpress File Upload 2.5.2 Iptanus Wordpress File Upload 2.5.3 Iptanus Wordpress File Upload 2.5.4 Iptanus Wordpress File Upload 2.5.5 Iptanus Wordpress File Upload 2.6.0 Iptanus Wordpress File Upload 2.7.0 Iptanus Wordpress File Upload 2.7.1 Iptanus Wordpress File Upload 2.7.2 Iptanus Wordpress File Upload 2.7.3 Iptanus Wordpress File Upload 2.7.4 Iptanus Wordpress File Upload 2.7.5 Iptanus Wordpress File Upload 2.7.6 Iptanus Wordpress File Upload 3.0.0 Iptanus Wordpress File Upload 3.1.0 Iptanus Wordpress File Upload 3.1.1 Iptanus Wordpress File Upload 3.1.2 Iptanus Wordpress File Upload 3.2.0 Iptanus Wordpress File Upload 3.2.1 Iptanus Wordpress File Upload 3.3.0 Iptanus Wordpress File Upload 3.3.1 Iptanus Wordpress File Upload 3.4.0 Iptanus Wordpress File Upload 3.4.1 Iptanus Wordpress File Upload 3.5.0 Iptanus Wordpress File Upload 3.6.0 Iptanus Wordpress File Upload 3.6.1 Iptanus Wordpress File Upload 3.7.0 Iptanus Wordpress File Upload 3.7.1 Iptanus Wordpress File Upload 3.7.2 Iptanus Wordpress File Upload 3.7.3 Iptanus Wordpress File Upload 3.8.0 Iptanus Wordpress File Upload 3.8.1 Iptanus Wordpress File Upload 3.8.2 Iptanus Wordpress File Upload 3.8.3 Iptanus Wordpress File Upload 3.8.4 Iptanus Wordpress File Upload 3.8.5 Iptanus Wordpress File Upload 3.9.0 Iptanus Wordpress File Upload 3.9.1 Iptanus Wordpress File Upload 3.9.2 Iptanus Wordpress File Upload 3.9.3 Iptanus Wordpress File Upload 3.9.4 Iptanus Wordpress File Upload 3.9.5 Iptanus Wordpress File Upload 3.9.6 Iptanus Wordpress File Upload 3.10.0 Iptanus Wordpress File Upload 3.11.0 Iptanus Wordpress File Upload 4.0.0 Iptanus Wordpress File Upload 4.0.1 Iptanus Wordpress File Upload 4.1.0 Iptanus Wordpress File Upload 4.2.0 Iptanus Wordpress File Upload 4.3.0 Iptanus Wordpress File Upload 4.3.1 Iptanus Wordpress File Upload 4.3.2 Iptanus Wordpress File Upload 4.3.3 Iptanus Wordpress File Upload 4.3.4 Iptanus Wordpress File Upload 4.4.0 Iptanus Wordpress File Upload 4.5.0 Iptanus Wordpress File Upload 4.5.1 Iptanus Wordpress File Upload 4.6.0 Iptanus Wordpress File Upload 4.6.1 Iptanus Wordpress File Upload 4.6.2 Iptanus Wordpress File Upload 4.7.0 Iptanus Wordpress File Upload 4.8.0 Iptanus Wordpress File Upload 4.9.0 Iptanus Wordpress File Upload 4.9.1 Iptanus Wordpress File Upload 4.10.0 Iptanus Wordpress File Upload 4.10.1 Iptanus Wordpress File Upload 4.10.2 Iptanus Wordpress File Upload 4.10.3 Iptanus Wordpress File Upload 4.11.0 Iptanus Wordpress File Upload 4.11.1 Iptanus Wordpress File Upload 4.11.2 Iptanus Wordpress File Upload 4.12.0 Iptanus Wordpress File Upload 4.12.1 Iptanus Wordpress File Upload 4.12.2 Iptanus Wordpress File Upload 4.13.0 Iptanus Wordpress File Upload 4.13.1 Iptanus Wordpress File Upload 4.14.0 Iptanus Wordpress File Upload 4.14.1 Iptanus Wordpress File Upload 4.14.2 Iptanus Wordpress File Upload 4.14.3 Iptanus Wordpress File Upload 4.14.4 Iptanus Wordpress File Upload 4.15.0 Iptanus Wordpress File Upload 4.16.0 Iptanus Wordpress File Upload 4.16.1 Iptanus Wordpress File Upload 4.16.2 Iptanus Wordpress File Upload 4.16.3 Iptanus Wordpress File Upload 4.16.4 Iptanus Wordpress File Upload 4.17.0 Iptanus Wordpress File Upload 4.18.0 Iptanus Wordpress File Upload 4.18.1 Iptanus Wordpress File Upload 4.19.0 Iptanus Wordpress File Upload 4.19.1	137

Summary

Vulnerable Configurations

References