CERT24CVE-2016-20103 — Path traversal in Cherry Plugin for WordPress before 1.2.7Loading data…
CERT24Threat Observatory
Period

CVE-2016-20103 — Path traversal in Cherry Plugin for WordPress before 1.2.7

Cherry Plugin for WordPress before version 1.2.7 allows unauthenticated attackers to download arbitrary files through the “file” parameter. The source reports 70% confidence in successful exploitation, with exploitation evidence first observed on 19 October 2023.

← Back to intelligence

CVE-2016-20103 — Path traversal in Cherry Plugin for WordPress before 1.2.7

Cherry Plugin for WordPress before version 1.2.7 allows unauthenticated attackers to download arbitrary files through the “file” parameter. The source reports 70% confidence in successful exploitation, with exploitation evidence first observed on 19 October 2023.