WordPress CVEs

Description

The Folders and Folders Pro plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.0 in Folders and 3.0.2 in Folders Pro via the 'handle_folders_file_upload' function. This makes it possible for authenticated attackers, with author access and above, to upload files to arbitrary locations on the server.

Affected WordPress components

• Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager Plugin · folders
  Possible match Active
  Up to and including 3.0; Up to and including 3.0.2
  View on WordPress.org
• folders Theme · folders
  Possible match Homeless
  Up to and including 3.0; Up to and including 3.0.2
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager — Up to and including 3.0
• Premio Folders Pro — Up to and including 3.0.2
• premio folders — Up to and including 3.0
• premio folders_pro — Up to and including 3.0.2

References

• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/folders/tags/3.0/includes/media.replace.php#L1311
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/3070429/folders/trunk/includes/media.replace.php
• www.wordfence.com https://www.wordfence.com/threat-intel/vulnerabilities/id/b4cc839c-de7a-43eb-a7fa-b1049419bfa3?source=cve
• nvd.nist.gov Official NVD record