Unrated severityNVD Advisory· Published Nov 28, 2014· Updated Jun 17, 2026
CVE-2014-8799
CVE-2014-8799
Description
Directory traversal vulnerability in the dp_img_resize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter to lib/dp_image.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
5- security.szurek.pl/dukapress-252-path-traversal.htmlnvdExploit
- www.exploit-db.com/exploits/35346nvdExploit
- plugins.trac.wordpress.org/changeset/1024640/dukapressnvdVendor Advisory
- wordpress.org/plugins/dukapress/changelog/nvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/98943nvd
News mentions
0No linked articles in our index yet.