WordPress IMDB Profile Widget plugin <= 1.0.8 - Unauthenticated Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability discovered by CrashBandicot @DosPerl in WordPress Plugin IMDb Profile Widget versions = 1.0.8...

CVE-2016-20078: Improper Control of Filename for Include/Require Statement in PHP Program

WordPress IMDb Profile Widget 1.0.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the url parameter. Attackers can supply directory traversal sequences in GET requests to pic.php to access sensitive files like...

WordPress IMDb Profile Widget Plugin 1.0.8 - Local File Inclusion

IMDb Profile Widget plugin is prone to a local file inclusion vulnerability. Solution Upgrade the plugin...