medium6.5
CVE-2024-35162
Path traversal vulnerability exists in Download Plugins and Themes from Dashboard versions prior to 1.8.6.
Impact
Path traversal vulnerability exists in Download Plugins and Themes from Dashboard versions prior to 1.8.6. If this vulnerability is exploited, a remote authenticated attacker with "switch_themes" privilege may obtain arbitrary files on the server.
Affected products
| Product | Affected versions |
|---|---|
| Download Plugins And Themes From Dashboard | before 1.8.6. |
Versions were read from the advisory text. No structured product data has been published for this record yet.