WordPress Plugin Vulnerabilities

JS MultiHotel 2.2.1 - includes/timthumb.php src Parameter Direct Request Path Disclosure

Description

The js-multihotel WordPress plugin was affected by an includes/timthumb.php src Parameter Direct Request Path Disclosure security vulnerability.

Affects Plugins

Plugin icon
js-multihotel
No known fix

References

URL
https://packetstormsecurity.com/files/#125959/
URL
https://seclists.org/fulldisclosure/2014/Mar/413

Classification

Type
FPD
OWASP top 10
A6: Security Misconfiguration
CWE
CWE-209

Miscellaneous

Verified
No
WPVDB ID
0e263df7-8519-41f0-b37b-bfb1e68ed37c

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
yvora - Full Path Disclosure
Published
2014-08-01
Title
moneymasters - Full Path Disclosure
Published
2019-10-16
Title
Fast Velocity Minify < 2.7.7 - Full Path Disclosure
Published
2014-08-01
Title
Jigoshop 1.8 - Multiple Script Direct Request Path Disclosure
Published
2015-10-12
Title
JM Twitter Cards <= 6.1 - Full Path Disclosure (FPD)