CVE-2019-8943

WordPress through 5.0.3 allows Path Traversal in wp_crop_image()

published February 20, 2019

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.8th percentile for exploit probability.

CVSS
—
EPSS
92%
Percentile
99.8
In the wild
Unconfirmed
What it is

WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can write the output image to an arbitrary directory via a filename containing two image extensions and ../ sequences, such as a filename ending with the .jpg?/../../file.jpg substring.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.91985 · 99.8th percentile
Published
2019-02-20T03:00Z
EPSS history
Timeline
  • 20 FEB 03:00Z
    WordPress through 5.0.3 allows Path Traversal in wp_crop_image()
    cvelistv5