WordPress Plugin Vulnerabilities

WP-Mon - Arbitrary File Download

Description

The wp-mon WordPress plugin was affected by an Arbitrary File Download security vulnerability.

Proof of Concept

Affects Plugins

Plugin icon
wp-mon
No known fix

References

URL
https://packetstormsecurity.com/files/#131502/

Classification

Type
RFI
OWASP top 10
A1: Injection
CWE
CWE-98

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
a2352ec6-714e-432c-ac4b-791b07565a80

Timeline

Publicly Published
2015-04-16 (about 11 years ago)
Added
2015-04-20 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2026-02-11
Title
Belletrist <= 1.2 - Unauthenticated Local File Inclusion
Published
2024-10-24
Title
The Pack Elementor addons < 2.1.0 - Authenticated (Contributor+) Local File Inclusion
Published
2025-03-17
Title
GetShop ecommerce <= 1.3 - Unauthenticated Local File Inclusion
Published
2025-09-22
Title
Accordion FAQ <= 2.2.1 - Authenticated (Contributor+) Local File Inclusion
Published
2025-04-25
Title
Fable Extra < 1.0.7 - Unauthenticated Local File Inclusion