Wordpress Alert: Arbitrary file read through download

A download handler accepts a path or ID outside the caller's allowed files. Private uploads or configuration files may be disclosed.

https://switchboardtechservices.com/guides/wordpress-alert-arbitrary-file-read-through-download-endpoints/

By Switchboard Tech Services · Originally published 2026-07-21

#Switchboard #Guide