CVE-2020-24144

Name of the Vulnerable Software and Affected Versions: Media File Organizer plugin version 1.0.1 for WordPress

Description: The issue allows an attacker to access files stored outside the web root folder via the items[] parameter in a move operation. This is a result of a directory traversal vulnerability in the Media File Organizer plugin for WordPress.

Recommendations: For Media File Organizer plugin version 1.0.1, consider disabling the move operation feature until a patch is available to prevent exploitation of the directory traversal vulnerability. Restrict access to sensitive files and folders to minimize the risk of unauthorized access.