CVE-2007-6369

PictPress <0.91 - Path Traversal

Title source: llm

Description

Multiple directory traversal vulnerabilities in resize.php in the PictPress 0.91 and earlier plugin for WordPress allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) size or (2) path parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by GoLd_M · textwebappsphp
https://www.exploit-db.com/exploits/4695

Scores

EPSS 0.0326
EPSS Percentile 86.9%

Classification

CWE
CWE-22
Status draft

Affected Products (1)

wordpress/pictpress < 0.91

Timeline

Published Dec 15, 2007
Tracked Since Feb 18, 2026