WordPress Plugin Vulnerabilities

Simple Fields 0.3.5 - Remote File Inclusion

Description

The Simple Fields WordPress plugin was affected by a Remote File Inclusion security vulnerability.

Affects Plugins

Plugin icon
simple-fields
Fixed in 0.3.6

Classification

Type
RFI
OWASP top 10
A1: Injection
CWE
CWE-98

Miscellaneous

Verified
No
WPVDB ID
3cce7cf5-6a99-4672-8a42-7bea4858ea0e

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-11-24 (about 10 years ago)

Other

Published
Title
Published
2026-02-27
Title
Yacht Rental <= 2.6 - Unauthenticated Local File Inclusion
Published
2025-08-19
Title
Fabric <= 1.5.0 - Unauthenticated Local File Inclusion
Published
2026-02-26
Title
Veil - Wedding & Photographer WordPress Theme <= 1.9 - Unauthenticated Local File Inclusion
Published
2024-04-22
Title
ElementsKit Elementor addons < 3.1.1 - Contributor+ Local File Inclusion via Onepage Scroll Module
Published
2025-08-19
Title
Funnel Builder by FunnelKit < 3.12.0 - Unauthenticated Local File Inclusion