Skip to content
Sign in
7.2 High

CVE-2023-6222 IThe Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 does not validate user input used in a path, which…

Description

IThe Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 does not validate user input used in a path, which could allow users with an admin role to perform path traversal attacks

Affected products and versions

Product Affected versions Fixed in
Quttera Web Malware Scanner 3.4 earliest → < 3.4.2.1 3.4.2.1
quttera_web_malware_scanner 3.4 earliest → < 3.4.2.1 3.4.2.1

Other CVEs of Quttera Web Malware Scanner

The 2 CVEs of Quttera Web Malware Scanner →
CVE-2023-6065 The Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 doesn't restrict access to detailed scan logs, which… Not rated
Track this CVE