CVE-2023-50885
MEDIUM
6.8
CVSS 3.1
Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AGILELOGIX Store Locator WordPress.This issue affects Store Locator WordPress: from n/a through 1.4.14.
Affected WordPress components
-
Agile Store Locator Plugin · agile-store-locatorUp to and including 1.4.14View on WordPress.org
A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.
Affected products and versions
- AGILELOGIX Store Locator WordPress — Up to and including 1.4.14
References
- patchstack.com https://patchstack.com/database/vulnerability/agile-store-locator/wordpress-store-locator-wordpress-plugin-1-4-14-arbitrary-file-deletion-vulnerability?_s_id=cve
- nvd.nist.gov Official NVD record