WordPress Plugin Vulnerabilities

JS MultiHotel 2.2.1 - includes/show_image.php file Parameter Remote File Inclusion DoS

Description

The js-multihotel WordPress plugin was affected by an includes/show_image.php file Parameter Remote File Inclusion DoS security vulnerability.

Affects Plugins

Plugin icon
js-multihotel
No known fix

References

URL
https://packetstormsecurity.com/files/#125959/
URL
https://seclists.org/fulldisclosure/2014/Mar/428

Classification

Type
RFI
OWASP top 10
A1: Injection
CWE
CWE-98

Miscellaneous

Verified
No
WPVDB ID
b8277223-9ca8-425a-9887-b260b9515d37

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-03-17
Title
LinkedIn Lite <= 1.0 - Unauthenticated Local File Inclusion
Published
2026-03-02
Title
OsTende <= 1.4.3 - Unauthenticated Local File Inclusion
Published
2024-08-29
Title
Clean Login < 1.14.6 - Authenticated (Contributor+) Local File Inclusion
Published
2026-02-27
Title
Artrium <= 1.0.14 - Unauthenticated Local File Inclusion
Published
2025-05-07
Title
List category posts < 0.92.0 - Contributor+ Local File Inclusion