WordPress Plugin Vulnerabilities

OPS Old Post Spinner 2.2.1 - LFI

Description

The OPS Old Post Spinner WordPress plugin was affected by a LFI security vulnerability.

Affects Plugins

Plugin icon
old-post-spinner
Fixed in 2.4.0

References

Exploitdb
16251

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Verified
No
WPVDB ID
869d0cd6-2d8a-4003-970c-629c5b9a4115

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2026-02-04
Title
ShortPixel Image Optimizer < 6.4.3 - Authenticated (Editor+) Arbitrary File Read via 'loadFile' Parameter
Published
2024-10-14
Title
Analyse Uploads <= 0.5 - Unauthenticated Arbitrary File Deletion
Published
2025-02-14
Title
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP < 6.2.1 - Unauthenticated Arbitrary File Deletion
Published
2025-07-16
Title
Formality < 1.5.10 - Unauthenticated Local File Inclusion
Published
2019-09-05
Title
Advanced Access Manager < 5.9.9 - Unauthenticated Local File Inclusion