5 matches found
CVE-2025-4524
CVE-2025-4524 - 未认证的 madara-core WordPress 主题 LFI WordFence 链接 描述 漏洞存在于 madara 的 madaraloadmore 操作中，template 参数来自用户的任意数据，并被传递给 PHP 的 include 函数。 漏洞 漏洞存在于 madara 的 madaraloadmore 操作中，template 参数来自用户的任意数据，并被传递给 PHP 的 include 函数。 相关漏洞代码如下： root@kitploit: addaction 'wpajaxmadaraloadmore', array $this...
CVE-2025-7712 Madara - Core <= 2.2.3 - Unauthenticated Arbitrary File Deletion
The Madara - Core plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wpmangadeletezip function in all versions up to, and including, 2.2.3. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, whic...
PT-2025-29899 · WordPress · Madara - Core
Name of the Vulnerable Software and Affected Versions: Madara - Core plugin for WordPress versions prior to 2.2.3 Description: The Madara - Core plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wp manga delete zip function. This allows...
WordPress plugin Madara - Core 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A path traversal...
