Themes Vulnerabilities

DejaVu 2.4 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion

Description

The dejavu WordPress theme was affected by a dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion security vulnerability.

Affects Themes

dejavu
Fixed in 2.5

References

Exploitdb
30443

Miscellaneous

Verified
No
WPVDB ID
57054eff-16ee-4d75-a200-824bf838c939

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2018-05-08
Title
Google Forms < 0.94 - Eval Injection
Published
2014-08-01
Title
CSS Plus 1.3.1 - Unspecified Vulnerabilities
Published
2014-08-01
Title
Encrypted Blog 0.0.6.2 - encrypt_blog_form.php redirect_to Parameter Arbitrary Site Redirect
Published
2014-08-01
Title
Site5 Wordpress Themes Email Spoofing
Published
2021-01-06
Title
iThemes Security < 7.7.0 - New-Password Requirements Not Enforced Until second Login