WordPress Plugin Vulnerabilities

Browser Rejector - Remote & Local File Inclusion

Description

The browser-rejector WordPress plugin was affected by a Remote & Local File Inclusion security vulnerability.

Affects Plugins

Plugin icon
browser-rejector
Fixed in 2.11

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Verified
No
WPVDB ID
854eb8b5-eaee-4781-b6fe-93ac3c067975

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2022-03-30
Title
Videos sync PDF <= 1.7.4 - Unauthenticated LFI
Published
2025-07-08
Title
Support Board < 3.8.1 - Unauthenticated Arbitrary File Deletion
Published
2025-03-19
Title
Event Manager, Events Calendar, Tickets, Registrations – Eventin < 4.0.25 - Authenticated (Contributor+) Local File Inclusion
Published
2025-04-17
Title
StoreContrl Woocommerce < 4.1.4 - Unauthenticated Arbitrary File Download
Published
2026-04-13
Title
Meta Box < 5.11.2 - Contributor+ Arbitrary File Deletion