WordPress Plugin Vulnerabilities

WPide < 3.0 - Admin+ Arbitrary File Read

Description

The plugin does not validate files to be output, which could allow high privilege users to read arbitrary files from the server

Affects Plugins

Fixed in 3.0

References

Classification

Type
TRAVERSAL
OWASP top 10
CWE

Miscellaneous

Original Researcher
Brandon Roldan
Verified
No

Timeline

Publicly Published
2022-08-09 (about 3 years ago)
Added
2022-08-24 (about 3 years ago)
Last Updated
2023-05-15 (about 2 years ago)

Other