High severity7.5NVD Advisory· Published May 16, 2026· Updated May 18, 2026

CVE-2021-47977

Description

WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the file parameter. Attackers can send requests to the duplicator_download action via admin-ajax.php with path traversal sequences to access sensitive system files outside the intended directory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Anti Malware Security And Bruteforce Firewallinferred
Range: = 4.20.59
Package: https://wordpress.org/plugins/anti-malware-security-and-bruteforce-firewall

Patches

Vulnerability mechanics

References

gotmls.netnvd
gotmls.net/downloads/nvd
www.exploit-db.com/exploits/50107nvd
www.vulncheck.com/advisories/wordpress-anti-malware-security-bruteforce-firewall-directory-traversalnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000