WordPress Plugin Vulnerabilities
Cart66 Pro <= 1.5.3 - Authenticated Arbitrary File Disclosure
Description
Ability to change settings with a registered (non-admin) user allows us to trigger an Arbitrary File Disclosure vulnerability with any path of our choosing.
One limitation with this vulnerability is that the target user (in the PoC, ‘test’) needs to have an account on the Cart66 installation.
Affects Plugins
Fixed in 1.5.4 References
Classification
Type
LFI
OWASP top 10
CWE
Miscellaneous
Submitter
James Hooker
Submitter website
Submitter twitter
Verified
No
WPVDB ID
Timeline
Publicly Published
2015-01-01 (about 11 years ago)
Added
2015-01-01 (about 11 years ago)
Last Updated
2020-10-25 (about 5 years ago)
WPScan 