CVE-2019-14206: Improper Limitation of a Pathname to a Restricted Directory

An Arbitrary File Deletion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to delete arbitrary files via the $REQUEST'adaptive-images-settings' parameter in adaptive-images-script.php...

CVE-2019-14205: Improper Limitation of a Pathname to a Restricted Directory

A Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to retrieve arbitrary files via the $REQUEST'adaptive-images-settings''sourcefile' parameter in adaptive-images-script.php...

PT-2019-13529

Name of the Vulnerable Software and Affected Versions Nevma Adaptive Images plugin versions prior to 0.6.67 Description A Local File Inclusion issue allows remote attackers to retrieve arbitrary files. This is achieved via the adaptive-images-settings parameter, specifically through the source fi...