CVE-2018-16299

CVE-2018-16299 : WordPress Localize My Post 1.0 is vulnerable to Local File Inclusion via the ajax/include.php parameter. The vulnerability stems from insufficient validation of the file parameter, enabling an attacker to read arbitrary server files. Affected: WordPress Localize My Post 1.0 plugi...

CVE-2018-16299

The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter...

CVE-2018-16299

The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter...

CVE-2018-16299: Improper Limitation of a Pathname to a Restricted Directory

The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter...

PT-2018-13475

Name of the Vulnerable Software and Affected Versions Localize My Post plugin version 1.0 Description The issue allows Directory Traversal via the ajax/include.php file parameter. Recommendations For Localize My Post plugin version 1.0, consider restricting access to the ajax/include.php file to...