Unauthorized Data Access Vulnerability in WordPress File Upload Plugin

CVE-2024-12719

Summary

The WordPress File Upload plugin is susceptible to unauthorized data exposure due to a missing capability check in the 'wfu_ajax_action_read_subfolders' function. This vulnerability enables authenticated users with Subscriber-level access or higher to execute limited path traversal attacks, allowing them to list directory contents and navigate through subdirectories in WordPress. However, it should be noted that direct file viewing remains unaffected.

References