Lucene search
+L

7 matches found

Packet Storm
Packet Storm
added 2022/01/05 12:0 a.m.260 views

WordPress The True Ranker 2.2.2 Arbitrary File Read

Exploit Title: WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read Unauthenticated Date: 23/12/2021 Exploit Authors: Nicole Sheinin, Liad Levy Vendor Homepage: https://wordpress.org/plugins/seo-local-rank/ Software Link: https://plugins.svn.wordpress.org/seo-local-rank/tags/2.2.2/ Versio...

7.5CVSS0.1AI score0.77944EPSS
Exploits5
0day.today
0day.today
added 2022/01/05 12:0 a.m.213 views

WordPress The True Ranker 2.2.2 Plugin - Arbitrary File Read (Unauthenticated) Exploit

Exploit Title: WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read Unauthenticated Exploit Authors: Nicole Sheinin, Liad Levy Vendor Homepage: https://wordpress.org/plugins/seo-local-rank/ Software Link: https://plugins.svn.wordpress.org/seo-local-rank/tags/2.2.2/ Version: versions = 2.2...

7.5CVSS0.4AI score0.77944EPSS
Exploits5
Exploit DB
Exploit DB
added 2022/01/05 12:0 a.m.287 views

WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read (Unauthenticated)

Exploit Title: WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read Unauthenticated Date: 23/12/2021 Exploit Authors: Nicole Sheinin, Liad Levy Vendor Homepage: https://wordpress.org/plugins/seo-local-rank/ Software Link: https://plugins.svn.wordpress.org/seo-local-rank/tags/2.2.2/ Versio...

7.5CVSS7.6AI score0.77944EPSS
Exploits5
Circl
Circl
added 2021/12/14 6:15 p.m.14 views

CVE-2021-39312

creationtimestamp| type| source ---|---|--- 2021-12-14 18:15:25+00:00| seen| https://t.me/cibsecurity/33937 2025-06-03 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-06-03 2025-06-05 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-06-05...

7.5CVSS7.2AI score0.77944EPSS
In wildExploits5References5
NVD
NVD
added 2021/12/14 4:15 p.m.16 views

CVE-2021-39312

The True Ranker plugin = 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the /admin/vendor/datatables/examples/resources/examples.php file...

7.5CVSS0.77944EPSS
Exploits5References3
Cvelist
Cvelist
added 2021/12/14 3:50 p.m.20 views

CVE-2021-39312 True Ranker <= 2.2.2 Directory Traversal/Arbitrary File Read

The True Ranker plugin = 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the /admin/vendor/datatables/examples/resources/examples.php file...

7.5CVSS7.7AI score0.77944EPSS
Exploits5References3
CVE
CVE
added 2021/12/14 3:50 p.m.75 views

CVE-2021-39312

Summary: CVE-2021-39312 affects the WordPress True Ranker plugin prior to 2.2.4. The vulnerability is an improper filtering flaw in the local file inclusion path in ~/admin/vendor/datatables/examples/resources/examples.php, allowing an attacker to read arbitrary files (e.g., wp-config.php) via th...

7.5CVSS7.4AI score0.77944EPSS
In wildExploits5References3Affected Software1
Rows per page
Query Builder