Nevma Adaptive Images Arbitrary File Deletion Vulnerability

WordPress plugin Adaptive Images is used to serve images in Wordpress based on device resolution, allowing dynamic resizing. An arbitrary file deletion vulnerability exists in WordPress plugin Adaptive Images versions prior to 0.6.67. An attacker can exploit this vulnerability to delete arbitrary...

CVE-2019-14205: Improper Limitation of a Pathname to a Restricted Directory

A Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to retrieve arbitrary files via the $REQUEST'adaptive-images-settings''sourcefile' parameter in adaptive-images-script.php...

PT-2019-13530 · Nevma · Nevma Adaptive Images

Name of the Vulnerable Software and Affected Versions: Nevma Adaptive Images plugin versions prior to 0.6.67 Description: The issue allows remote attackers to delete arbitrary files via the adaptive-images-settings parameter in adaptive-images-script.php. This is achieved by exploiting the...

CVE-2019-14206: Improper Limitation of a Pathname to a Restricted Directory

An Arbitrary File Deletion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to delete arbitrary files via the $REQUEST'adaptive-images-settings' parameter in adaptive-images-script.php...