漏洞编号：CVE-2024-5637
评分：7.5
恶意利用的后果：任意文件读取导致信息泄漏
来源：Source Wordfence
公布时间：2024-06-07 11:15:53
更新时间：2024-06-07 11:15:53
类型：Directory traversal
描述：The Market Exporter plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'remove_files' function in all versions up to, and including, 2.0.19. This makes it possible for authenticated attackers, with Subscriber-level access and above, to use path traversal to delete arbitrary files on the server.
影响组件：
参考资料:
