WordPress Plugin Vulnerabilities

AntiVirus 1.0 - uninstall.php Direct Request Path Disclosure

Description

The AntiVirus WordPress plugin was affected by an uninstall.php Direct Request Path Disclosure security vulnerability.

Affects Plugins

Plugin icon
antivirus
Fixed in 1.1

References

URL
https://packetstormsecurity.com/files/#121833/
URL
https://seclists.org/fulldisclosure/2013/Jun/0

Classification

Type
FPD
OWASP top 10
A6: Security Misconfiguration
CWE
CWE-209

Miscellaneous

Verified
No
WPVDB ID
0300d610-2713-4c5c-9c04-791630ddbcd3

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-02-20
Title
C9 Blocks <= 1.7.7 - Unauthenticated Full Path Disclosure
Published
2014-08-01
Title
WP PHP Widget 1.0.2 - Full Path Disclosure
Published
2023-09-25
Title
Vrm 360 3D Model Viewer <= 1.2.1 - Full Path Disclosure
Published
2014-08-01
Title
DZS Video Gallery 3.1.3 - Remote File Disclosure
Published
2014-08-01
Title
Q and A - Multiple Scripts Direct Request Path Disclosure