Themes Vulnerabilities

Urban City - download.php Local File Inclusion (LFI)

Description

The urbancity WordPress theme was affected by a download.php Local File Inclusion (LFI) security vulnerability.

Affects Themes

urbancity
No known fix

References

URL
https://packetstormsecurity.com/files/#128185/

Classification

Type
RFI
OWASP top 10
A1: Injection
CWE
CWE-98

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
8e2485c3-1f80-41ff-87aa-2b263ba88110

Timeline

Publicly Published
2014-09-20 (about 11 years ago)
Added
2014-09-20 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-12-19
Title
Userpro <= 5.1.9 - Unauthenticated Local File Inclusion
Published
2025-03-14
Title
HUSKY < 1.3.6.5 - Subscriber+ Local File Inclusion
Published
2024-04-05
Title
Easy Social Share Buttons < 9.5 - Authenticated (Subscriber+) Local File Inclusion
Published
2026-02-25
Title
Zentrum <= 1.0 - Unauthenticated Local File Inclusion
Published
2026-02-27
Title
Sounder | Internet Radio & Streaming Elementor Template Kit <= 1.3.11 - Unauthenticated Local File Inclusion