CVE-2020-10564

Name of the Vulnerable Software and Affected Versions File Upload plugin versions prior to 4.13.0 for WordPress

Description The issue allows for directory traversal, potentially leading to remote code execution. This can be achieved by uploading a specially crafted txt file into the lib directory due to a wfu include lib call.

Recommendations For versions prior to 4.13.0, update to version 4.13.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the file upload functionality to minimize the risk of exploitation.