Directory Traversal Flaw in Media File Organizer Plugin for WordPress

CVE-2020-24144

Summary

The Media File Organizer plugin version 1.0.1 for WordPress contains a directory traversal vulnerability that allows attackers to gain unauthorized access to files stored outside the web root directory. This can be exploited through the items[] parameter during a move operation, potentially exposing sensitive information stored on the server.

References