CVE-2017-20287 | Javo mes Javo Spot Plugin up to 2.x /wp-admin/admin-ajax.php fn path traversal

October 22, 2026 Yanac

A vulnerability classified as problematic has been found in Javo mes Javo Spot Plugin up to 2.x. Affected by this vulnerability is an unknown functionality of the file /wp-admin/admin-ajax.php. The manipulation of the argument fn leads to path traversal.

This vulnerability is traded as CVE-2017-20287. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More