CVE-2016-20103

The Cherry Plugin for WordPress (versions before 1.2.7 ) is vulnerable to a path traversal vulnerability. This flaw allows unauthenticated attackers to download arbitrary files by sending GET requests to /admin/import-export/download-content.php using the file parameter. Because the script passes...

EUVD-2016-10918

Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspath' parameter. Attackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value...

CVE-2016-20101

The Issuu Panel plugin for WordPress (versions before 1.6.6 ) is vulnerable to a PHP file inclusion vulnerability. An unauthenticated attacker can include remote or local files by sending a GET request to menu/documento/requests/ajax-docs.php with a crafted abspath parameter, which is insecurely ...

EUVD-2015-9431

Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the unsanitized 'file' parameter passed to readfile. Attackers can send GET requests to asposepdfexporterdownload.php with traversal sequence...

CVE-2015-20125

The Aspose PDF Exporter plugin for WordPress (versions before 2.0 ) is vulnerable to a path traversal vulnerability (CWE-22). This flaw exists because the file parameter passed to the readfile() function is not properly sanitized. Unauthenticated attackers can exploit this by sending GET requests...

EUVD-2015-9429

Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by passing unsanitized paths to readfile. Attackers can send GET requests to asposedocexporterdownload.php with the 'file' parameter set to...

EUVD-2015-9430

Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the unsanitized 'file' parameter. Attackers can send GET requests to asposeimportexportdownload.php with traversal sequences lik...

CVE-2015-20124

The Aspose Importer & Exporter plugin for WordPress (versions before 3.0) is vulnerable to a path traversal vulnerability. This flaw exists because the file parameter is improperly sanitized in the aspose_import_export_download.php file. An unauthenticated attacker can exploit this by sending GET...

CVE-2015-20124 Aspose Importer & Exporter WordPress Plugin < 3.0 Path Traversal via aspose_import_export_download.php

Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the unsanitized 'file' parameter. Attackers can send GET requests to asposeimportexportdownload.php with traversal sequences lik...

CVE-2015-20123

The Aspose Doc Exporter plugin for WordPress (versions before 2.0) is vulnerable to a path traversal vulnerability. The root cause is the use of unsanitized paths in the readfile() function, which allows unauthenticated attackers to download arbitrary files via GET requests to aspose_doc_exporter...

EUVD-2014-9827

ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the 'file' parameter of /wp-content/themes/churchope/lib/downloadlink.php. Attackers can supply directory traversal sequences to read sensitiv...

CVE-2014-125134

The ChurcHope theme for WordPress (versions before 2.2 ) is vulnerable to a path traversal vulnerability. Unauthenticated attackers can exploit the file parameter of the /wp-content/themes/churchope/lib/downloadlink.php component by providing directory traversal sequences. This flaw allows the do...

CVE-2014-125133

The NativeChurch theme for WordPress (versions before 1.6.2 ) is vulnerable to a path traversal vulnerability. Unauthenticated attackers can exploit the file parameter of download.php by sending GET requests containing directory traversal sequences. This allows for the arbitrary download of sensi...

EUVD-2014-9826

NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve...

CVE-2026-9827

The Totolink X2000R router (version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ) is vulnerable to an arbitrary file write in the boa binary's formUploadFile functionality. An authenticated attacker can send a specially crafted HTTP request to the /boafrm/formUploadFile page. The vulnerability is ca...

EUVD-2026-105333

A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

EUVD-2026-105320

When invoked with --remote-header-name -J, curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints response precedes the final HTTP response, or if an ETag header is processed before Content-Disposition under --etag-save. This flaw allows an HTTPS serve...

CVE-2026-92390

When invoked with "--remote-header-name" "-J", curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints response precedes the final HTTP response, or if an "ETag" header is processed before "Content-Disposition" under "--etag-save". This flaw allows an...

CVE-2026-92390

When invoked with --remote-header-name -J, curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints response precedes the final HTTP response, or if an ETag header is processed before Content-Disposition under --etag-save. This flaw allows an HTTPS serve...

CVE-2026-92390

The curl command-line tool fails to maintain its documented anti-clobbering protection when the --remote-header-name (-J) option is used. A malicious HTTP(S) server can bypass this protection by providing an intermediate 103 Early Hints response or by processing an ETag header before a Content-Di...