WordPress Plugin Vulnerabilities

Shortcodes Ultimate < 4.10.0 - Authenticated Directory Traversal

Description

The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin was affected by an Authenticated Directory Traversal security vulnerability.

Affects Plugins

Plugin icon
shortcodes-ultimate
Fixed in 4.10.0

References

CVE
CVE-2017-2245
URL
https://jvn.jp/en/jp/JVN63249051/index.html
URL
https://plugins.trac.wordpress.org/changeset/1684377/#file217

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22
CVSS
5.0 (medium)

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
69ae49ce-6781-4707-8345-a7fbdc159597

Timeline

Publicly Published
2017-07-06 (about 8 years ago)
Added
2017-07-16 (about 8 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2014-08-01
Title
Tinymce Thumbnail Gallery < 1.1.0 - download-image.php Local File Inclusion
Published
2016-07-13
Title
WP Fastest Cache <= 0.8.5.9 - Local File Inclusion (LFI)
Published
2026-03-19
Title
ilGhera Carta Docente for WooCommerce < 1.5.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'cert' Parameter
Published
2023-12-27
Title
JVM rich text icons < 1.2.7 - Subscriber+ Arbitrary File Deletion
Published
2018-01-10
Title
Service Finder Booking < 3.2 - Unauthenticated Local File Disclosure