WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload
CVE-2023-40204
9.1CRITICAL
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 20 December 2023
What is CVE-2023-40204?
The Premio Folders plugin for WordPress has a vulnerability that allows for the unrestricted upload of files with dangerous types. This issue could allow an attacker to upload malicious files to the server, potentially leading to unauthorized access or exploitation of the website. The affected versions range from n/a through 2.9.2, highlighting the importance of ensuring your WordPress site is running the latest and most secure versions of all plugins.
Affected Version(s)
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 2.9.2