CVE-2018-16283

PoC ×3—

CVSS 3.0

9.8 critical

EPSS

63%p99

Published

Sep 24, 2018 (Sep 24, 2018)

Modified

Jun 17, 2026

Description

The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter.

Vendors: wechat brodcast project
Products: wechat brodcast
Ecosystems: WordPress
Weakness: CWE-22
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (63.1%)

In the news0 stories

No ingested article mentions this CVE yet.