WordPress Plugin Vulnerabilities

Crayon Syntax Highlighter <= 1.12 - Remote File Inclusion

Description

The Crayon Syntax Highlighter WordPress plugin was affected by a Remote File Inclusion security vulnerability.

Affects Plugins

Plugin icon
crayon-syntax-highlighter
Fixed in 1.13

References

Classification

Type
RFI
OWASP top 10
A1: Injection
CWE
CWE-98

Miscellaneous

Verified
No
WPVDB ID
7366bb9f-b01d-4df8-bc34-d908b2126690

Timeline

Publicly Published
2012-10-15 (about 13 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2026-02-26
Title
Notarius - Legal Advisor WordPress Theme <= 1.9 - Unauthenticated Local File Inclusion
Published
2026-01-13
Title
JNews - Pay Writer <= 11.0.0 - Authenticated (Subscriber+) Local File Inclusion
Published
2025-06-09
Title
Valen - Sport, Fashion WooCommerce WordPress Theme <= 2.4 - Unauthenticated Local File Inclusion
Published
2025-12-13
Title
Exhibz < 3.0.10 - Authenticated (Contributor+) Local File Inclusion
Published
2024-07-01
Title
Beaver Builder Addons by WPZOOM < 1.3.6 - Authenticated (Editor+) Local File Inclusion