WordPress Plugin Vulnerabilities

Posts In Page < 1.3.0 - Directory Traversal

Description

The Posts in Page WordPress plugin was affected by a Directory Traversal security vulnerability.

Affects Plugins

Plugin icon
posts-in-page
Fixed in 1.3.0

References

CVE
CVE-2017-18585

Classification

Type
TRAVERSAL
OWASP top 10
A1: Injection
CWE
CWE-22
CVSS
8.1 (high)

Miscellaneous

Verified
No
WPVDB ID
10d8de47-f9fb-4abf-93ab-74f514eb965b

Timeline

Publicly Published
2017-02-15 (about 9 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2022-03-27
Title
Admin Word Count Column <= 2.2 - Unauthenticated Arbitrary File Read
Published
2019-07-28
Title
WP Fastest Cache <= 0.8.9.5 - Directory Traversal
Published
2020-05-16
Title
Simple File List < 4.2.8 - Authenticated Arbitrary File Deletion
Published
2023-03-20
Title
All-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via Traversal
Published
2015-09-30
Title
mTheme Unus < 2.3 - Directory Traversal