WordPress Plugin Vulnerabilities

Myflash <= 1.00 - (wppath) RFI

Description

The myflash WordPress plugin was affected by a (wppath) RFI security vulnerability.

Affects Plugins

Plugin icon
myflash
No known fix

References

CVE
CVE-2007-2485
Exploitdb
3828

Classification

Type
RFI
OWASP top 10
A1: Injection
CWE
CWE-98

Miscellaneous

Verified
No
WPVDB ID
6bc4b62b-fcba-477b-8215-4513bc151034

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2025-12-31
Title
Weedles <= 1.1.12 - Unauthenticated Local File Inclusion
Published
2026-02-02
Title
CMSMasters Content Composer < 1.4.6 - Authenticated (Contributor+) Local File Inclusion
Published
2025-07-28
Title
Premmerce User Roles < 1.0.14 - Unauthenticated Local File Inclusion
Published
2025-10-14
Title
WoodMart < 8.3.2 - Authenticated (Contributor+) Local File Inclusion
Published
2025-11-03
Title
North <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion