WS-2018-0169

Date: January 26, 2018

Any WordPress version, including the current 4.9.6 version, is susceptible to the vulnerability.For exploiting the vulnerability discussed in the following an attacker would need to gain the privileges to edit and delete media files beforehand. Thus, the vulnerability can be used to escalate privileges attained through the takeover of an account with a role as low as Author, or through the exploitation of another vulnerability/misconfiguration.

Language: PHP