CVE-2016-20103Published
Cherry Plugin for WordPress < 1.2.7 Path Traversal via download-content.php
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2016-20103 · Microsoft / collected KEV context
cve-program · CVE-2016-20103
- https://wpscan.com/vulnerability/90034817-dee7-40c9-80a2-1f1cd1d033ee
- https://github.com/CherryFramework/cherry-plugin/commit/69a3f7b
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/cherry-file-download.yaml
- https://www.vulncheck.com/advisories/cherry-plugin-for-wordpress-1.2.7-path-traversal-via-download-content-php
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.