onyx --cves cve-2018-12895
CVE-2018-12895
- score
- <0.1
- cvss
- 8.8
- epss
- 62.2%
- published
- 2018-06-26
- kev added
- —
- first seen
WordPress through 4.9.6 contains a directory traversal caused by missing filename validation in wp_delete_attachment in wp-includes/post.php, letting authors execute arbitrary code and delete wp-config.php, exploit requires author capabilities.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
- Public PoC http://packetstormsecurity.com/files/164633/WordPress-4.9.6-Arbitrary-File-Deletion.html
Exploit availability
Weaknesses
References 6
- http://packetstormsecurity.com/files/164633/WordPress-4.9.6-Arbitrary-File-Deletion.html
- http://www.securityfocus.com/bid/104569
- https://blog.ripstech.com/2018/wordpress-file-delete-to-code-execution/
- https://lists.debian.org/debian-lts-announce/2018/07/msg00046.html
- https://wpvulndb.com/vulnerabilities/9100
- https://www.debian.org/security/2018/dsa-4250