WordPress Plugin Vulnerabilities

WP PHP Widget 1.0.2 - Full Path Disclosure

Description

The wp-php-widget WordPress plugin was affected by a Full Path Disclosure security vulnerability.

Affects Plugins

Plugin icon
wp-php-widget
No known fix

References

CVE
CVE-2013-0721

Classification

Type
FPD
OWASP top 10
A6: Security Misconfiguration
CWE
CWE-209

Miscellaneous

Verified
No
WPVDB ID
5c17a607-45db-4a44-9fcb-ca64ac5e195c

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2013-06-21
Title
Wordpress 3.4 - 3.5.1 /wp-admin/users.php Malformed s Parameter Path Disclosure
Published
2014-08-01
Title
Imperial Fairytale - Multiple Script Direct Request Path Disclosure
Published
2014-08-01
Title
Jigoshop 1.8 - Multiple Script Direct Request Path Disclosure
Published
2014-08-01
Title
Tera Charts 0.1 - charts/zoomabletreemap.php fn Parameter Remote Path Traversal File Disclosure
Published
2025-02-11
Title
AForms Eats < 1.3.2 - Unauthenticated Full Path Disclosure