Popular WooCommerce WordPress Plugin Patches Critical Vulnerability

If you own an eCommerce website built on WordPress and powered by WooCommerce plugin, then beware of a new vulnerability that could compromise your online store. Simon Scannell, a researcher at RIPS Technologies GmbH, discovered an arbitrary file deletion vulnerability in the popular WooCommerce...

PHP7CMS foreground exists arbitrary file deletion vulnerability

PHP7 content management system referred to as PHP7CMS by Chunjie studio using PHP7 technology newly developed content management program. PHP7CMS foreground exists arbitrary file deletion vulnerability. Attackers can use the vulnerability to delete arbitrary files, resulting in system...

PopojiCMS Directory Traversal Vulnerability

PopojiCMS is an open source content management system CMS based on the Popoji framework. A directory traversal vulnerability exists in the adminlibrary.php file in PopojiCMS v2.0.1. A remote attacker can exploit this vulnerability to delete arbitrary files with the help of specially crafted...

CVE-2018-18936

An issue was discovered in PopojiCMS v2.0.1. adminlibrary.php allows remote attackers to delete arbitrary files via directory traversal in the po-admin/route.php?mod=library&act=delete id parameter...

CVE-2018-18936

An issue was discovered in PopojiCMS v2.0.1. adminlibrary.php allows remote attackers to delete arbitrary files via directory traversal in the po-admin/route.php?mod=library&act=delete id parameter...

CVE-2018-18936

CVE-2018-18936 affects PopojiCMS v2.0.1. A directory traversal vulnerability in admin_library.php allows a remote attacker to delete arbitrary files via the parameter po-admin/route.php?mod=library&act=delete id. The connected CNVD entry confirms the vulnerability exists in PopojiCMS v2.0.1 with ...

CVE-2018-18936

An issue was discovered in PopojiCMS v2.0.1. adminlibrary.php allows remote attackers to delete arbitrary files via directory traversal in the po-admin/route.php?mod=library&act=delete id parameter...

WordPress 3.9.x < 3.9.17 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists in the wpplaylistshortcode function within the /wp-includes/media.php script due to a failure to validate input passed via...

WordPress 4.2.x < 4.2.13 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists in the wpplaylistshortcode function within the /wp-includes/media.php script due to a failure to validate input passed via...

WordPress 3.9.x < 3.9.25 Arbitrary File Deletion

According to its self-reported version number, the detected WordPress application is affected by issue that could allow a user who is able to edit uploaded media to attempt to delete files outside the uploads directory. Note that the scanner has not tested for these issues but has instead relied...

WordPress 4.1.x < 4.1.24 Arbitrary File Deletion

According to its self-reported version number, the detected WordPress application is affected by issue that could allow a user who is able to edit uploaded media to attempt to delete files outside the uploads directory. Note that the scanner has not tested for these issues but has instead relied...

WordPress 4.7.x < 4.7.11 Arbitrary File Deletion

According to its self-reported version number, the detected WordPress application is affected by issue that could allow a user who is able to edit uploaded media to attempt to delete files outside the uploads directory. Note that the scanner has not tested for these issues but has instead relied...

WordPress 3.7.x < 3.7.27 Arbitrary File Deletion

According to its self-reported version number, the detected WordPress application is affected by issue that could allow a user who is able to edit uploaded media to attempt to delete files outside the uploads directory. Note that the scanner has not tested for these issues but has instead relied...

emlog has an arbitrary file deletion vulnerability

emlog is a functional blog and CMS builder based on PHP and MySQL. There is an arbitrary file deletion vulnerability in emlog. The vulnerability is caused by the program does not filter the template deletion function , an attacker can use the vulnerability to delete arbitrary files on the server...

WordPress 3.8.x < 3.8.27 Arbitrary File Deletion

According to its self-reported version number, the detected WordPress application is affected by issue that could allow a user who is able to edit uploaded media to attempt to delete files outside the uploads directory. Note that the scanner has not tested for these issues but has instead relied...

WordPress 4.3.x < 4.3.17 Arbitrary File Deletion

According to its self-reported version number, the detected WordPress application is affected by issue that could allow a user who is able to edit uploaded media to attempt to delete files outside the uploads directory. Note that the scanner has not tested for these issues but has instead relied...

WordPress 4.5.x < 4.5.15 Arbitrary File Deletion

According to its self-reported version number, the detected WordPress application is affected by issue that could allow a user who is able to edit uploaded media to attempt to delete files outside the uploads directory. Note that the scanner has not tested for these issues but has instead relied...

WordPress 4.2.x < 4.2.21 Arbitrary File Deletion

According to its self-reported version number, the detected WordPress application is affected by issue that could allow a user who is able to edit uploaded media to attempt to delete files outside the uploads directory. Note that the scanner has not tested for these issues but has instead relied...

WordPress 4.8.x < 4.8.7 Arbitrary File Deletion

According to its self-reported version number, the detected WordPress application is affected by issue that could allow a user who is able to edit uploaded media to attempt to delete files outside the uploads directory. Note that the scanner has not tested for these issues but has instead relied...

WordPress 4.9.x < 4.9.7 Arbitrary File Deletion

According to its self-reported version number, the detected WordPress application is affected by issue that could allow a user who is able to edit uploaded media to attempt to delete files outside the uploads directory. Note that the scanner has not tested for these issues but has instead relied...