WordPress Plugin Vulnerabilities

wp-amasin-the-amazon-affiliate-shop 0.9.6 - reviews.php url Parameter Local File Inclusion

Description

The wp-amasin-the-amazon-affiliate-shop WordPress plugin was affected by a reviews.php url Parameter Local File Inclusion security vulnerability.

Affects Plugins

Plugin icon
wp-amasin-the-amazon-affiliate-shop
No known fix

References

CVE
CVE-2014-4577

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Verified
No
WPVDB ID
254bd357-7014-4041-9d32-0aa9bc6bb373

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
Plugin Newsletter 1.5 - Remote File Disclosure
Published
2024-10-21
Title
3D Work In Progress <= 1.0.3 - Authenticated (Subscriber+) Arbitrary File Deletion
Published
2021-07-22
Title
WooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File Inclusion
Published
2022-07-28
Title
VR Calendar < 2.4.5 - LFI via CSRF
Published
2015-04-13
Title
WP Mobile Edition < 2.3 - Remote File Disclosure