CVE-2024-49253 – WordPress Analyse Uploads plugin <= 0.5 - Arbitrary File Deletion vulnerability

https://notcve.org/view.php?id=CVE-2024-49253

14 Oct 2024 — Relative Path Traversal vulnerability in James Park Analyse Uploads allows Relative Path Traversal.This issue affects Analyse Uploads: from n/a through 0.5. La vulnerabilidad de Path Traversal relativo en James Park Analyse Uploads permite Path Traversal relativo. Este problema afecta a Analyse Uploads: desde n/a hasta 0.5. The Analyse Uploads plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the jpn_time_to_die() function in all versions up to, and in... • https://patchstack.com/database/vulnerability/analyse-uploads/wordpress-analyse-uploads-plugin-0-5-arbitrary-file-deletion-vulnerability?_s_id=cve • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-23: Relative Path Traversal •