EUVD-2016-10918

Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspath' parameter. Attackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value...

CVE-2016-20101

The Issuu Panel plugin for WordPress (versions prior to 1.6.6 ) is vulnerable to a PHP file inclusion vulnerability. An unauthenticated attacker can exploit the abspath parameter via a GET request to menu/documento/requests/ajax-docs.php. By providing a crafted value, the attacker can trigger the...