CVE-2016-10956

CVE-2016-10956 affects WordPress Mail Masta 1.0, with local file inclusion in count_of_send.php and csvexport.php. The Nuclei template and other sources confirm unauthenticated LFI (example PoC). Impact per sources: attacker can read server files, potentially leading to information disclosure. CV...

WordPress plugin Mail Masta 'count_of_send.php' local file inclusion vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A local file inclusion vulnerability exists in the WordPress plugin Mail Masta 'countofsend.php', which allow...