title: WordPress File Upload < 4.16.3 - Contributor+ Path Traversal to RCE
description: The WordPress File Upload Free and Pro WordPress plugins before 4.16.3 allow users with a role as low as Contributor to perform path traversal via a shortcode argument, which can then be used to upload a PHP code disguised as an image inside the auto-loaded directory of the plugin, resulting in arbitrary code execution.
problem types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
affected:
{
product: WordPress File Upload
vendor: Unknown
versions:
lessThan: 4.16.3, status: affected, version: 4.16.3, versionType: custom
}
{
product: WordPress File Upload Pro
vendor: Unknown
versions:
lessThan: 4.16.3, status: affected, version: 4.16.3, versionType: custom
}
