Live › vulnerability › CVE-2012-20002
Go to dashboardThe TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 lets anyone send a GET request to /php/download-image.php with traversal sequences in the href parameter. An attacker can read arbitrary server files such as wp-config.php, exposing database credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
1.1.0 or later, or remove itEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the href parameter. Attackers can send GET requests to /php/download-image.php with traversal sequences like ../../../../wp-config.php to retrieve database credentials and system files. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.
This page as .md · .json · in your agent: get_signal("CVE-2012-20002")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.