CVE-2018-7422

A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajaxpath parameter to editor/extensions/pagebuilder/includes/ajaxshortcodepattern.php, aka absolute path traversal...

CVE-2018-7422

The Site Editor WordPress plugin (version 1.1.1 and earlier) is vulnerable to a Local File Inclusion (LFI) , also known as absolute path traversal. The root cause is a lack of sanitization on the ajax_path parameter within the file editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php...

CVE-2018-7422: Improper Limitation of a Pathname to a Restricted Directory

A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajaxpath parameter to editor/extensions/pagebuilder/includes/ajaxshortcodepattern.php, aka absolute path traversal...