WordPress Plugin Vulnerabilities

Advanced Dewplayer <= 1.2 - download-file.php dew_file Parameter Traversal Arbitrary File Access

Description

The Advanced Dewplayer WordPress plugin was affected by a download-file.php dew_file Parameter Traversal Arbitrary File Access security vulnerability.

Affects Plugins

Plugin icon
advanced-dewplayer
Fixed in 1.3

References

CVE
CVE-2013-7240
URL
https://seclists.org/oss-sec/2013/q4/566

Classification

Type
TRAVERSAL
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Verified
No
WPVDB ID
dfd31d1f-3c2f-42d2-a776-035a86cf2fef

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2023-05-23
Title
WordPress File Upload < 4.19.2 - Admin+ Path Traversal
Published
2023-03-08
Title
Drag and Drop Multiple File Upload PRO - Contact Form 7 Standard < 2.11.0 - Path Traversal
Published
2022-11-29
Title
Simple:Press < 6.8.1 - Admin+ Arbitrary File Update
Published
2019-07-12
Title
Ad Inserter <= 2.4.19 - Authenticated Path Traversal
Published
2022-02-23
Title
WooCommerce < 6.2.1 - Path Traversal via Importers