WordPress Plugin Vulnerabilities

Zingiri Web Shop <= 2.2.3 - ajax_file_cut.php selectedDoc Parameter Remote PHP Code

Description

The g-web-shop WordPress plugin was affected by an ajax_file_cut.php selectedDoc Parameter Remote PHP Code security vulnerability.

Affects Plugins

Plugin icon
g-web-shop
Fixed in 2.2.4

References

Exploitdb
18111

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
10b86afd-1b3e-4773-959e-288acdbab5ee

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2015-12-02
Title
Cool Video Gallery < 2.0 - Authenticated Command Injection
Published
2022-12-29
Title
Multiple themes - Unauthenticated Arbitrary File Upload
Published
2024-12-12
Title
Notibar – Notification Bar for WordPress < 2.1.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via njt_nofi_text
Published
2025-11-25
Title
Hotel Booking Lite < 5.2.4 - Authenticated (Hotel Worker+) Remote Code Execution
Published
2024-05-03
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.3 - Unauthenticated Arbitrary Shortcode Execution