EUVD-2015-4722

Malware in sbrugna...

CVE-2015-4703

CVE-2015-4703 describes an absolute path traversal in the WordPress Rename plugin (version 1.0) for WordPress. The vulnerability resides in mysqldump_download.php, where an attacker can read arbitrary files by supplying a full pathname in the dumpfname parameter. This affects the plugin as instal...

PT-2016-3624

Name of the Vulnerable Software and Affected Versions WordPress Rename plugin version 1.0 Description The issue allows remote attackers to read arbitrary files via a full pathname in the dumpfname parameter in the mysqldump download.php file. Recommendations For WordPress Rename plugin version 1....