WordPress JSmol2WP <=1.07 - Local File Inclusion

WordPress JSmol2WP plugin 1.07 is susceptible to local file inclusion via ../ directory traversal in query=php://filter/resource= in the jsmol.php query string. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context...

CVE-2018-20463

The JSmol2WP plugin for WordPress (version 1.07 and earlier) is vulnerable to Local File Inclusion (LFI) and Server-Side Request Forgery (SSRF) . The root cause is a directory traversal vulnerability occurring via ../ sequences in the query=php://filter/resource= parameter of the jsmol.php query ...