WordPress Plugin Vulnerabilities

WP Online Store 1.3.1 - index.php Multiple Parameter Traversal Arbitrary File Access

Description

The wp-online-store WordPress plugin was affected by an index.php Multiple Parameter Traversal Arbitrary File Access security vulnerability.

Affects Plugins

Plugin icon
wp-online-store
Fixed in 1.3.2

Miscellaneous

Verified
No
WPVDB ID
e338e9d8-df54-426b-9a6c-4d88061bf664

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2014-08-01
Title
RokBox <= 2.13 - thumb.php src Parameter Malformed Input Path Disclosure
Published
2017-12-27
Title
woocommerce-csvimport 3.3.6 – Authenticated Arbitrary File Deletion
Published
2023-05-30
Title
Blog-in-Blog <= 1.1.1 - Editor+ Local File Inclusion via Shortcode
Published
2014-08-01
Title
Echelon 2.4 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion
Published
2026-01-16
Title
Spin Wheel < 2.1.1 - Unauthenticated Client-Side Prize Manipulation