WordPress Plugin Vulnerabilities

WP Online Store 1.3.1 - index.php slug Parameter Traversal Local File Inclusion

Description

The wp-online-store WordPress plugin was affected by an index.php slug Parameter Traversal Local File Inclusion security vulnerability.

Affects Plugins

Plugin icon
wp-online-store
Fixed in 1.3.2

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Verified
No
WPVDB ID
3973ce80-b030-47a7-b580-1ef70c757563

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2015-02-11
Title
WordPress Slider Revolution - Local File Disclosure
Published
2021-10-19
Title
Images to WebP < 1.9 - Authenticated Local File Inclusion
Published
2024-06-20
Title
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Arbitrary File Deletion
Published
2019-01-16
Title
Shortcode Factory < 2.8 - Local File Inclusion
Published
2023-01-30
Title
Rank Math SEO < 1.0.107.3 - Contributor+ LFI