WordPress Plugin Vulnerabilities

Last.fm Rotation 1.0 - lastfm-proxy.php snode Parameter Remote Path Traversal File Access

Description

The lastfm-rotation WordPress plugin was affected by a lastfm-proxy.php snode Parameter Remote Path Traversal File Access security vulnerability.

Affects Plugins

Plugin icon
lastfm-rotation
No known fix

References

CVE
CVE-2014-5181
URL
https://codevigilant.com/disclosure/wp-plugin-hdw-player-video-player-video-gallery-a1-injection/

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
0d044d75-3690-4ec7-be76-77de3b59c818

Timeline

Publicly Published
2014-09-19 (about 11 years ago)
Added
2014-09-19 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2015-02-22
Title
WP Ultimate CSV Importer <= 3.6.74 - Database Table Export
Published
2012-06-01
Title
Limit Login Attempts < 1.7.1 - Auth Cookies Brute Force Bypass
Published
2019-01-25
Title
Total Donations - Update Arbitrary WordPress Option Values
Published
2022-12-29
Title
Passster < 3.5.5.9 - Protection Bypass & Arbitrary Post Access
Published
2020-04-29
Title
WordPress < 5.4.1 - Unauthenticated Users View Private Posts