CVE-2022-2554 — Enable Media Replace < 4.0.0 - Admin+ Path Traversal
The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload folder, which could allow high privilege users such as admin to…
Published: 2022-10-10 · CVSS: Unscored
The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload folder, which could allow high privilege users such as admin to move them outside to the web root directory via a path traversal attack for example
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7