Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2023-2688: Path Traversal in WordPress File Upload Plugin

www.wordfence.com 2025-11-08 查看中文 →

Security Advisory CVE-2023-2688 Medium WordPress

Affected:

WordPress File Upload <= 4.19.1
WordPress File Upload Pro <= 4.19.1

Fixed in:

4.19.2

Referenced CVEs: CVE-2023-2688 · 4.9

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

FluentCRM Pro v1.12.1 Authenticated SQL Injection Vulnerability and POC 2026-08-26 WordPress Elementor WooCommerce Builder Addon Privilege Escalation via PDF Import 2026-08-25 WordPress Newsletter Plugin Missing Authorization Arbitrary Modification (CVE-2024-2825) 2026-08-25 Media Demy <=1.1.9 Authenticated SQL Injection via Bulk Payment (CVE-2023-2825) POC 2026-08-25 Ultimate Member < 2.2.1 Stored XSS via Profile Field (CVE-2023-10184) 2026-08-25

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro