WordPress Plugin Vulnerabilities

Zingiri Web Shop 2.2.0 - init.inc wpabspath Parameter Remote File Inclusion

Description

The zingiri-web-shop WordPress plugin was affected by an init.inc wpabspath Parameter Remote File Inclusion security vulnerability.

Affects Plugins

Plugin icon
zingiri-web-shop
Fixed in 2.2.1

References

Exploitdb
17867

Classification

Type
RFI
OWASP top 10
A1: Injection
CWE
CWE-98

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
8c871cab-dd34-40de-8281-14463b754339

Timeline

Publicly Published
2014-09-28 (about 11 years ago)
Added
2014-09-28 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-09-24
Title
Podiant <= 1.1 - Unauthenticated Local File Inclusion
Published
2025-07-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion
Published
2015-04-16
Title
WP-Mon - Arbitrary File Download
Published
2025-08-23
Title
Kipso < 1.3.5 - Unauthenticated Local File Inclusion
Published
2026-03-05
Title
Mr. Cobbler | Custom Shoemaking & Footwear Repairs WordPress Theme <= 1.1.9 - Unauthenticated Local File Inclusion