Threats tagged 'ghsa-p3jv-9gww-63p2'

The Jupiter X Core plugin for WordPress versions up to and including 4.62.0 contains a directory traversal vulnerability via the 'file' parameter. This vulnerability allows unauthenticated attackers to read arbitrary files within the wp-content/uploads/ directory. The vulnerability is mitigated by a path confinement check that prevents access to files outside this directory, such as wp-config.php.