WordPress Customizer Directory Traversal Vulnerability

WordPress Customizer Directory Traversal Vulnerability

CVE-2017-14722 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

Before version 4.8.2, WordPress allowed a Directory Traversal attack in the Customizer component via a crafted theme filename.

Learn more about our Wordpress Pen Testing.