WordPress Plugin Vulnerabilities

WP Mobile Edition < 2.3 - Local File Inclusion (LFI)

Description

The WP Mobile Edition WordPress plugin was affected by a Local File Inclusion (LFI) security vulnerability.

Affects Plugins

Plugin icon
wp-mobile-edition
Fixed in 2.3

References

Exploitdb
37244

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
5fcae93d-1e1a-4b88-901a-c1fc6a5ae35d

Timeline

Publicly Published
2015-06-08 (about 10 years ago)
Added
2015-06-09 (about 10 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-12-26
Title
Ultimate Addons for Beaver Builder < 1.35.14 - Contributor+ Arbitrary File Download
Published
2022-07-11
Title
CAPTCHA 4WP < 7.1.0 - Local File Inclusion via CSRF
Published
2026-03-06
Title
Meta Box < 5.11.2 - Contributor+ Arbitrary File Deletion
Published
2025-08-26
Title
WooCommerce csv import export < 2.0.7 - Authenticated (Subscriber+) Arbitrary File Deletion
Published
2025-06-03
Title
Welcart e-Commerce < 2.11.14 - Authenticated (Editor+) Arbitrary File Deletion