Threats tagged 'ghsa-h23j-55hj-5495'

A vulnerability in the Shared Files WordPress plugin before version 1.7.67 and shared-files-pro before 1.7.68 allows unauthenticated users to bypass a traversal filter and specify file paths outside the intended uploads directory. This can lead to deletion of arbitrary files on the server, such as wp-config.php, when a corresponding file entry is deleted, causing denial of service and potential site takeover.