WordPress Plugin Vulnerabilities

CIP4 Folder Download 1.10 - Local File Inclusion

Description

The cip4-folder-download-widget WordPress plugin was affected by a Local File Inclusion security vulnerability.

Affects Plugins

Plugin icon
cip4-folder-download-widget
No known fix

References

URL
https://packetstormsecurity.com/files/#130009/

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
030a363c-c9c9-421b-a1b5-071fe48f8eca

Timeline

Publicly Published
2015-01-20 (about 11 years ago)
Added
2015-01-20 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-05-26
Title
WP Directory Kit < 1.2.0 - Unauthenticated Local File Inclusion
Published
2024-06-05
Title
Cowidgets – Elementor Addons < 1.2.0 - Authenticated (Contributor+) Local File Inclusion
Published
2024-12-17
Title
WPLMS < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion
Published
2014-08-24
Title
KenBurner Slider - Unauthenticated Arbitrary File Download
Published
2021-09-09
Title
wp-publications - Local File Inclusion