Description

WordPress is prone to a directory traversal vulnerability because it fails to sufficiently verify user-supplied input data. Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks or to cause the affected website to consume resources, thus denying service to legitimate users. WordPress version 4.5.3 is vulnerable.

Remediation

Update to WordPress version 4.6 or latest

References

https://sumofpwn.nl/advisory/2016/path_traversal_vulnerability_in_wordpress_core_ajax_handlers.html

https://www.exploit-db.com/exploits/40288/

https://packetstormsecurity.com/files/138457/WordPress-4.5.3-Core-Ajax-Handlers-Path-Traversal.html

https://core.trac.wordpress.org/ticket/37490

http://seclists.org/oss-sec/2016/q3/347

Related Vulnerabilities

WordPress Plugin Visualizer:Tables and Charts Manager for WordPress PHAR Deserialization (3.7.9)

XWiki Insufficiently Protected Credentials Vulnerability (CVE-2022-41933)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1756)

WordPress Plugin Cherry Team Members Information Disclosure (1.4.1)

MySQL CVE-2018-3171 Vulnerability (CVE-2018-3171)

Severity

High

Classification

CVE-2016-6896 CVE-2016-10148 CWE-22 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

Tags

Missing Update Directory Traversal