WordPress Plugin Vulnerabilities

Firestats - Remote Configuration File Download

Description

The firestats WordPress plugin was affected by a Remote Configuration File Download security vulnerability.

Affects Plugins

Plugin icon
firestats
No known fix

References

Exploitdb
14308

Miscellaneous

Verified
No
WPVDB ID
d3e101bc-93df-4b5d-90e0-ad8f50cb110e

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2018-12-13
Title
WordPress <= 5.0 - Authenticated File Delete
Published
2026-04-08
Title
Bookly < 27.1 - Unauthenticated Price Manipulation via 'tips'
Published
2014-08-01
Title
Awake 3.3 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion
Published
2014-08-01
Title
mb.YTPlayer for background videos 1.7.2 - TinyMCE Popup Unspecified Issue
Published
2014-08-01
Title
Echelon 2.4 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion