CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.1. It affects WordPress. Its EPSS score suggests a 13.0% probability of exploitation in the next 30 days.
CVE
CVE-2019-10869
Severity
HIGH
CVSS
8.1
EPSS
13.02%
WordPress
Original NVD Description
Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uploads add-on is activated). This allows an attacker to traverse the file system to access files and execute code via the includes/fields/upload.php (aka upload/submit page) name and tmp_name parameters.
Related CVEs
Other vulnerabilities affecting the same vendor(s)