WordPress Plugin Vulnerabilities

Group Documents 1.2.1 - bp-group-documents-settings.php file Parameter Remote Path Traversal File Location Manipulation

Description

The BP Group Documents WordPress plugin was affected by a bp-group-documents-settings.php file Parameter Remote Path Traversal File Location Manipulation security vulnerability.

Affects Plugins

Plugin icon
bp-group-documents
Fixed in 1.2.2

References

URL
https://seclists.org/fulldisclosure/2014/Feb/170

Miscellaneous

Verified
No
WPVDB ID
6680bcfa-bc62-472f-8f56-22c84276297d

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-01-30
Title
HT Event – WordPress Event Manager Plugin for Elementor <= 1.4.7 - Authenticated (Contributor+) Sensitive Information Exposure via HT Event: Sponsor
Published
2014-08-01
Title
DejaVu 2.4 - dl-skin.php _mysite_download_skin Parameter Absolute Path Traversal Remote File Download
Published
2014-08-01
Title
Image slider with description - Unspecified
Published
2019-02-04
Title
Instagram Feed < 1.12 - Unspecified Issues
Published
2017-03-14
Title
Membership Simplified <= 1.58 - Unauthenticated Arbitrary File Download