Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5196
HistorySep 29, 2017 - 7:16 a.m.

Directory Traversal

2017-09-2907:16:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

EPSS

0.003

Percentile

69.4%

Wordpress is vulnerable to directory traversal attacks. The library does not validate a theme’s filename before displaying it, allowing a malicious user to display the contents of the directory.