WordPress Plugin Vulnerabilities

DukaPress <= 2.5.3 - Unauthenticated Path Traversal

Description

The DukaPress WordPress plugin was affected by an Unauthenticated Path Traversal security vulnerability.

Affects Plugins

Plugin icon
dukapress
Fixed in 2.5.4

References

CVE
CVE-2014-8799
Exploitdb
35346
URL
auxiliary/scanner/http/wp_dukapress_file_read
URL
https://exchange.xforce.ibmcloud.com/vulnerabilities/98943

Miscellaneous

Submitter
pvdl
Verified
Yes
WPVDB ID
0f3c72da-5745-4f2f-b999-dbd0b5ec960c

Timeline

Publicly Published
2014-11-24 (about 11 years ago)
Added
2014-12-29 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2022-01-06
Title
IP2Location Country Blocker < 2.26.5 - Ban Bypass
Published
2020-02-25
Title
Pricing Table by Supsystic < 1.8.2 - Insecure Permissions on AJAX Actions
Published
2020-08-13
Title
Quiz and Survey Master < 7.0.1 - Unauthenticated Arbitrary File Deletion
Published
2020-04-11
Title
Tickera WordPress Event Ticketing < 3.4.6.9 - Unauthenticated Sensitive Data Exposure
Published
2017-12-12
Title
Rating-Widget: Star Review System < 2.9.0 - Enable Debugging