Lucene search

K
cvelistMitreCVELIST:CVE-2016-7169
HistoryJan 05, 2017 - 2:00 a.m.

CVE-2016-7169

2017-01-0502:00:00
mitre
www.cve.org
6

AI Score

6.2

Confidence

High

EPSS

0.002

Percentile

58.6%

Directory traversal vulnerability in the File_Upload_Upgrader class in wp-admin/includes/class-file-upload-upgrader.php in the upgrade package uploader in WordPress before 4.6.1 allows remote authenticated users to access arbitrary files via a crafted urlholder parameter.

AI Score

6.2

Confidence

High

EPSS

0.002

Percentile

58.6%