James Charlesworth CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH James Charlesworth CVE published 2026-10-20

CVE-2012-20002

CVE-2012-20002 is a path traversal vulnerability in the TinyMCE Thumbnail Gallery plugin for WordPress before version 1.1.0. The vulnerability allows unauthenticated attackers to read arbitrary files via the href parameter in a GET request to /php/download-image.php. This could potentially lead to the retrieval of sensitive files such as database credentials and system files.