Vulnetix
Try Vulnetix Request Demo
CVE-2019-8943 PUBLISHED

WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can write the output image to an arbitrary directory via a filename containing two image extensions and ../ sequences, such as a filename ending with the .jpg?/../../file.jpg substring.

EPSS 93.89% · 99.9th percentile

Risk Scores

EPSS Score
93.89%
99.9th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSwordpress4.9.1+dfsg-1, 4.9.2+dfsg-1, 4.9.4+dfsg-1
Ubuntu:24.04:LTSwordpress0, 6.4.3+dfsg1-1ubuntu1, 6.2+dfsg1-1ubuntu1
Ubuntu:16.04:LTSwordpress4.3.1+dfsg-1, 4.4.1+dfsg-1, 4.4.2+dfsg-1
Ubuntu:20.04:LTSwordpress5.2.2+dfsg1-1, 0, 5.2.4+dfsg1-1
Ubuntu:22.04:LTSwordpress5.8.2+dfsg1-1ubuntu1, 5.8.3+dfsg1-1ubuntu1, 5.8.3+dfsg1-1ubuntu1.1
Ubuntu:25.10wordpress0, 6.7.2+dfsg1-1.1ubuntu1

Timeline

References

Open in Interactive Console →