Description

WordPress is prone to a directory traversal vulnerability because it fails to sufficiently verify user-supplied input data. Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks or to cause the affected website to consume resources, thus denying service to legitimate users. WordPress version 4.5.3 is vulnerable.

Remediation

Update to WordPress version 4.6 or latest

References

https://sumofpwn.nl/advisory/2016/path_traversal_vulnerability_in_wordpress_core_ajax_handlers.html

https://www.exploit-db.com/exploits/40288/

https://packetstormsecurity.com/files/138457/WordPress-4.5.3-Core-Ajax-Handlers-Path-Traversal.html

https://core.trac.wordpress.org/ticket/37490

http://seclists.org/oss-sec/2016/q3/347

Related Vulnerabilities

WordPress 4.2.x Possible SQL Injection Vulnerability (4.2 - 4.2.16)

WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Multiple Security Bypass Vulnerabilities (8.0)

WordPress Plugin VRView Cross-Site Scripting (1.1.3)

WordPress 'press-this.php' Remote Security Bypass Vulnerability (0.7 - 3.1.1)

WordPress Plugin Lingotek Translation Multiple Cross-Site Scripting Vulnerabilities (1.1.8)

Severity

High

Classification

CVE-2016-6896 CVE-2016-10148 CWE-22 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L

Tags

Missing Update Directory Traversal